@djangocfg/api 2.1.455 → 2.1.456

package/dist/index.cjs

@@ -3,6 +3,9 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __esm = (fn, res) => function __init() {
+  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+};
 var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, { get: all[name], enumerable: true });
@@ -17,1012 +20,406 @@ var __copyProps = (to, from, except, desc) => {
 };
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// src/index.ts
-var index_exports = {};
-__export(index_exports, {
-  APIError: () => APIError,
-  APILogger: () => APILogger,
-  CfgAccounts: () => CfgAccounts,
-  CfgAccountsAPI: () => API,
-  CfgAccountsApi: () => CfgAccountsApi,
-  CfgAccountsApiKey: () => CfgAccountsApiKey,
-  CfgAccountsAuth: () => CfgAccountsAuth,
-  CfgAccountsOauth: () => CfgAccountsOauth,
-  CfgAccountsProfile: () => CfgAccountsProfile,
-  CfgCentrifugo: () => CfgCentrifugo,
-  CfgCentrifugoAPI: () => API2,
-  CfgCentrifugoApi: () => CfgCentrifugoApi,
-  CfgTotp: () => CfgTotp,
-  CfgTotpAPI: () => API3,
-  CfgTotpApi: () => CfgTotpApi,
-  CfgTotpBackupCodes: () => CfgTotpBackupCodes,
-  CfgTotpSetup: () => CfgTotpSetup,
-  CfgTotpVerify: () => CfgTotpVerify,
-  CookieStorageAdapter: () => CookieStorageAdapter,
-  LocalStorageAdapter: () => LocalStorageAdapter,
-  MemoryStorageAdapter: () => MemoryStorageAdapter,
-  NetworkError: () => NetworkError,
-  api: () => CfgAccountsApi,
-  applyRoleLogPolicy: () => applyRoleLogPolicy,
-  auth: () => auth,
-  defaultLogger: () => defaultLogger,
-  dispatchValidationError: () => dispatchValidationError,
-  dpopEnabled: () => dpopEnabled2,
-  formatZodError: () => formatZodError,
-  getLogLevel: () => getLogLevel,
-  isBrowser: () => isBrowser2,
-  isDev: () => isDev,
-  isProd: () => isProd,
-  isStaticBuild: () => isStaticBuild,
-  onLogLevelChange: () => onLogLevelChange,
-  onValidationError: () => onValidationError,
-  setLogLevel: () => setLogLevel
-});
-module.exports = __toCommonJS(index_exports);
-
 // src/_api/generated/helpers/errors.ts
-var APIError = class extends Error {
-  constructor(statusCode, statusText, response, url, message) {
-    super(message || `HTTP ${statusCode}: ${statusText}`);
-    this.statusCode = statusCode;
-    this.statusText = statusText;
-    this.response = response;
-    this.url = url;
-    this.name = "APIError";
+var APIError, NetworkError;
+var init_errors = __esm({
+  "src/_api/generated/helpers/errors.ts"() {
+    APIError = class extends Error {
+      constructor(statusCode, statusText, response, url, message) {
+        super(message || `HTTP ${statusCode}: ${statusText}`);
+        this.statusCode = statusCode;
+        this.statusText = statusText;
+        this.response = response;
+        this.url = url;
+        this.name = "APIError";
+      }
+      static {
+        __name(this, "APIError");
+      }
+      get details() {
+        if (typeof this.response === "object" && this.response !== null) {
+          return this.response;
+        }
+        return null;
+      }
+      get fieldErrors() {
+        const details = this.details;
+        if (!details) return null;
+        const fieldErrors = {};
+        for (const [key, value] of Object.entries(details)) {
+          if (Array.isArray(value)) fieldErrors[key] = value;
+        }
+        return Object.keys(fieldErrors).length > 0 ? fieldErrors : null;
+      }
+      get errorMessage() {
+        const details = this.details;
+        if (!details) return this.message;
+        if (details.detail) {
+          return Array.isArray(details.detail) ? details.detail.join(", ") : String(details.detail);
+        }
+        if (details.error) return String(details.error);
+        if (details.message) return String(details.message);
+        const fieldErrors = this.fieldErrors;
+        if (fieldErrors) {
+          const firstField = Object.keys(fieldErrors)[0];
+          if (firstField) return `${firstField}: ${fieldErrors[firstField]?.join(", ")}`;
+        }
+        return this.message;
+      }
+      get isValidationError() {
+        return this.statusCode === 400;
+      }
+      get isAuthError() {
+        return this.statusCode === 401;
+      }
+      get isPermissionError() {
+        return this.statusCode === 403;
+      }
+      get isNotFoundError() {
+        return this.statusCode === 404;
+      }
+      get isServerError() {
+        return this.statusCode >= 500 && this.statusCode < 600;
+      }
+    };
+    NetworkError = class extends Error {
+      constructor(message, url, originalError) {
+        super(message);
+        this.url = url;
+        this.originalError = originalError;
+        this.name = "NetworkError";
+      }
+      static {
+        __name(this, "NetworkError");
+      }
+    };
   }
-  static {
-    __name(this, "APIError");
+});
+
+// src/_api/generated/core/bodySerializer.gen.ts
+var serializeFormDataPair, formDataBodySerializer, jsonBodySerializer;
+var init_bodySerializer_gen = __esm({
+  "src/_api/generated/core/bodySerializer.gen.ts"() {
+    serializeFormDataPair = /* @__PURE__ */ __name((data, key, value) => {
+      if (typeof value === "string" || value instanceof Blob) {
+        data.append(key, value);
+      } else if (value instanceof Date) {
+        data.append(key, value.toISOString());
+      } else {
+        data.append(key, JSON.stringify(value));
+      }
+    }, "serializeFormDataPair");
+    formDataBodySerializer = {
+      bodySerializer: /* @__PURE__ */ __name((body) => {
+        const data = new FormData();
+        Object.entries(body).forEach(([key, value]) => {
+          if (value === void 0 || value === null) {
+            return;
+          }
+          if (Array.isArray(value)) {
+            value.forEach((v) => serializeFormDataPair(data, key, v));
+          } else {
+            serializeFormDataPair(data, key, value);
+          }
+        });
+        return data;
+      }, "bodySerializer")
+    };
+    jsonBodySerializer = {
+      bodySerializer: /* @__PURE__ */ __name((body) => JSON.stringify(body, (_key, value) => typeof value === "bigint" ? value.toString() : value), "bodySerializer")
+    };
   }
-  get details() {
-    if (typeof this.response === "object" && this.response !== null) {
-      return this.response;
-    }
-    return null;
+});
+
+// src/_api/generated/core/params.gen.ts
+var extraPrefixesMap, extraPrefixes;
+var init_params_gen = __esm({
+  "src/_api/generated/core/params.gen.ts"() {
+    extraPrefixesMap = {
+      $body_: "body",
+      $headers_: "headers",
+      $path_: "path",
+      $query_: "query"
+    };
+    extraPrefixes = Object.entries(extraPrefixesMap);
   }
-  get fieldErrors() {
-    const details = this.details;
-    if (!details) return null;
-    const fieldErrors = {};
-    for (const [key, value] of Object.entries(details)) {
-      if (Array.isArray(value)) fieldErrors[key] = value;
-    }
-    return Object.keys(fieldErrors).length > 0 ? fieldErrors : null;
+});
+
+// src/_api/generated/core/queryKeySerializer.gen.ts
+var init_queryKeySerializer_gen = __esm({
+  "src/_api/generated/core/queryKeySerializer.gen.ts"() {
   }
-  get errorMessage() {
-    const details = this.details;
-    if (!details) return this.message;
-    if (details.detail) {
-      return Array.isArray(details.detail) ? details.detail.join(", ") : String(details.detail);
-    }
-    if (details.error) return String(details.error);
-    if (details.message) return String(details.message);
-    const fieldErrors = this.fieldErrors;
-    if (fieldErrors) {
-      const firstField = Object.keys(fieldErrors)[0];
-      if (firstField) return `${firstField}: ${fieldErrors[firstField]?.join(", ")}`;
+});
+
+// src/_api/generated/core/serverSentEvents.gen.ts
+function createSseClient({
+  onRequest,
+  onSseError,
+  onSseEvent,
+  responseTransformer,
+  responseValidator,
+  sseDefaultRetryDelay,
+  sseMaxRetryAttempts,
+  sseMaxRetryDelay,
+  sseSleepFn,
+  url,
+  ...options
+}) {
+  let lastEventId;
+  const sleep = sseSleepFn ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+  const createStream = /* @__PURE__ */ __name(async function* () {
+    let retryDelay = sseDefaultRetryDelay ?? 3e3;
+    let attempt = 0;
+    const signal = options.signal ?? new AbortController().signal;
+    while (true) {
+      if (signal.aborted) break;
+      attempt++;
+      const headers = options.headers instanceof Headers ? options.headers : new Headers(options.headers);
+      if (lastEventId !== void 0) {
+        headers.set("Last-Event-ID", lastEventId);
+      }
+      try {
+        const requestInit = {
+          redirect: "follow",
+          ...options,
+          body: options.serializedBody,
+          headers,
+          signal
+        };
+        let request = new Request(url, requestInit);
+        if (onRequest) {
+          request = await onRequest(url, requestInit);
+        }
+        const _fetch = options.fetch ?? globalThis.fetch;
+        const response = await _fetch(request);
+        if (!response.ok) throw new Error(`SSE failed: ${response.status} ${response.statusText}`);
+        if (!response.body) throw new Error("No body in SSE response");
+        const reader = response.body.pipeThrough(new TextDecoderStream()).getReader();
+        let buffer = "";
+        const abortHandler = /* @__PURE__ */ __name(() => {
+          try {
+            reader.cancel();
+          } catch {
+          }
+        }, "abortHandler");
+        signal.addEventListener("abort", abortHandler);
+        try {
+          while (true) {
+            const { done, value } = await reader.read();
+            if (done) break;
+            buffer += value;
+            buffer = buffer.replace(/\r\n?/g, "\n");
+            const chunks = buffer.split("\n\n");
+            buffer = chunks.pop() ?? "";
+            for (const chunk of chunks) {
+              const lines = chunk.split("\n");
+              const dataLines = [];
+              let eventName;
+              for (const line of lines) {
+                if (line.startsWith("data:")) {
+                  dataLines.push(line.replace(/^data:\s*/, ""));
+                } else if (line.startsWith("event:")) {
+                  eventName = line.replace(/^event:\s*/, "");
+                } else if (line.startsWith("id:")) {
+                  lastEventId = line.replace(/^id:\s*/, "");
+                } else if (line.startsWith("retry:")) {
+                  const parsed = Number.parseInt(line.replace(/^retry:\s*/, ""), 10);
+                  if (!Number.isNaN(parsed)) {
+                    retryDelay = parsed;
+                  }
+                }
+              }
+              let data;
+              let parsedJson = false;
+              if (dataLines.length) {
+                const rawData = dataLines.join("\n");
+                try {
+                  data = JSON.parse(rawData);
+                  parsedJson = true;
+                } catch {
+                  data = rawData;
+                }
+              }
+              if (parsedJson) {
+                if (responseValidator) {
+                  await responseValidator(data);
+                }
+                if (responseTransformer) {
+                  data = await responseTransformer(data);
+                }
+              }
+              onSseEvent?.({
+                data,
+                event: eventName,
+                id: lastEventId,
+                retry: retryDelay
+              });
+              if (dataLines.length) {
+                yield data;
+              }
+            }
+          }
+        } finally {
+          signal.removeEventListener("abort", abortHandler);
+          reader.releaseLock();
+        }
+        break;
+      } catch (error) {
+        onSseError?.(error);
+        if (sseMaxRetryAttempts !== void 0 && attempt >= sseMaxRetryAttempts) {
+          break;
+        }
+        const backoff = Math.min(retryDelay * 2 ** (attempt - 1), sseMaxRetryDelay ?? 3e4);
+        await sleep(backoff);
+      }
     }
-    return this.message;
-  }
-  get isValidationError() {
-    return this.statusCode === 400;
-  }
-  get isAuthError() {
-    return this.statusCode === 401;
-  }
-  get isPermissionError() {
-    return this.statusCode === 403;
-  }
-  get isNotFoundError() {
-    return this.statusCode === 404;
-  }
-  get isServerError() {
-    return this.statusCode >= 500 && this.statusCode < 600;
-  }
-};
-var NetworkError = class extends Error {
-  constructor(message, url, originalError) {
-    super(message);
-    this.url = url;
-    this.originalError = originalError;
-    this.name = "NetworkError";
+  }, "createStream");
+  const stream = createStream();
+  return { stream };
+}
+var init_serverSentEvents_gen = __esm({
+  "src/_api/generated/core/serverSentEvents.gen.ts"() {
+    __name(createSseClient, "createSseClient");
   }
-  static {
-    __name(this, "NetworkError");
+});
+
+// src/_api/generated/core/pathSerializer.gen.ts
+var separatorArrayExplode, separatorArrayNoExplode, separatorObjectExplode, serializeArrayParam, serializePrimitiveParam, serializeObjectParam;
+var init_pathSerializer_gen = __esm({
+  "src/_api/generated/core/pathSerializer.gen.ts"() {
+    separatorArrayExplode = /* @__PURE__ */ __name((style) => {
+      switch (style) {
+        case "label":
+          return ".";
+        case "matrix":
+          return ";";
+        case "simple":
+          return ",";
+        default:
+          return "&";
+      }
+    }, "separatorArrayExplode");
+    separatorArrayNoExplode = /* @__PURE__ */ __name((style) => {
+      switch (style) {
+        case "form":
+          return ",";
+        case "pipeDelimited":
+          return "|";
+        case "spaceDelimited":
+          return "%20";
+        default:
+          return ",";
+      }
+    }, "separatorArrayNoExplode");
+    separatorObjectExplode = /* @__PURE__ */ __name((style) => {
+      switch (style) {
+        case "label":
+          return ".";
+        case "matrix":
+          return ";";
+        case "simple":
+          return ",";
+        default:
+          return "&";
+      }
+    }, "separatorObjectExplode");
+    serializeArrayParam = /* @__PURE__ */ __name(({
+      allowReserved,
+      explode,
+      name,
+      style,
+      value
+    }) => {
+      if (!explode) {
+        const joinedValues2 = (allowReserved ? value : value.map((v) => encodeURIComponent(v))).join(separatorArrayNoExplode(style));
+        switch (style) {
+          case "label":
+            return `.${joinedValues2}`;
+          case "matrix":
+            return `;${name}=${joinedValues2}`;
+          case "simple":
+            return joinedValues2;
+          default:
+            return `${name}=${joinedValues2}`;
+        }
+      }
+      const separator = separatorArrayExplode(style);
+      const joinedValues = value.map((v) => {
+        if (style === "label" || style === "simple") {
+          return allowReserved ? v : encodeURIComponent(v);
+        }
+        return serializePrimitiveParam({
+          allowReserved,
+          name,
+          value: v
+        });
+      }).join(separator);
+      return style === "label" || style === "matrix" ? separator + joinedValues : joinedValues;
+    }, "serializeArrayParam");
+    serializePrimitiveParam = /* @__PURE__ */ __name(({
+      allowReserved,
+      name,
+      value
+    }) => {
+      if (value === void 0 || value === null) {
+        return "";
+      }
+      if (typeof value === "object") {
+        throw new Error(
+          "Deeply-nested arrays/objects aren\u2019t supported. Provide your own `querySerializer()` to handle these."
+        );
+      }
+      return `${name}=${allowReserved ? value : encodeURIComponent(value)}`;
+    }, "serializePrimitiveParam");
+    serializeObjectParam = /* @__PURE__ */ __name(({
+      allowReserved,
+      explode,
+      name,
+      style,
+      value,
+      valueOnly
+    }) => {
+      if (value instanceof Date) {
+        return valueOnly ? value.toISOString() : `${name}=${value.toISOString()}`;
+      }
+      if (style !== "deepObject" && !explode) {
+        let values = [];
+        Object.entries(value).forEach(([key, v]) => {
+          values = [...values, key, allowReserved ? v : encodeURIComponent(v)];
+        });
+        const joinedValues2 = values.join(",");
+        switch (style) {
+          case "form":
+            return `${name}=${joinedValues2}`;
+          case "label":
+            return `.${joinedValues2}`;
+          case "matrix":
+            return `;${name}=${joinedValues2}`;
+          default:
+            return joinedValues2;
+        }
+      }
+      const separator = separatorObjectExplode(style);
+      const joinedValues = Object.entries(value).map(
+        ([key, v]) => serializePrimitiveParam({
+          allowReserved,
+          name: style === "deepObject" ? `${name}[${key}]` : key,
+          value: v
+        })
+      ).join(separator);
+      return style === "label" || style === "matrix" ? separator + joinedValues : joinedValues;
+    }, "serializeObjectParam");
   }
-};
+});
 
-// src/_api/generated/helpers/auth.ts
-var ACCESS_KEY = "cfg.access_token";
-var REFRESH_KEY = "cfg.refresh_token";
-var API_KEY_KEY = "cfg.api_key";
-var isBrowser = typeof window !== "undefined";
-var localStorageBackend = {
-  get(key) {
-    if (!isBrowser) return null;
-    try {
-      return window.localStorage.getItem(key);
-    } catch {
-      return null;
-    }
-  },
-  set(key, value) {
-    if (!isBrowser) return;
-    try {
-      if (value === null) window.localStorage.removeItem(key);
-      else window.localStorage.setItem(key, value);
-    } catch {
-    }
-  }
-};
-var COOKIE_MAX_AGE = 60 * 60 * 24 * 30;
-var cookieBackend = {
-  get(key) {
-    if (!isBrowser) return null;
-    try {
-      const re = new RegExp(`(?:^|;\\s*)${encodeURIComponent(key)}=([^;]*)`);
-      const m = document.cookie.match(re);
-      return m ? decodeURIComponent(m[1]) : null;
-    } catch {
-      return null;
-    }
-  },
-  set(key, value) {
-    if (!isBrowser) return;
-    try {
-      const k = encodeURIComponent(key);
-      const secure = window.location.protocol === "https:" ? "; Secure" : "";
-      if (value === null) {
-        document.cookie = `${k}=; Path=/; Max-Age=0; SameSite=Lax${secure}`;
-      } else {
-        const v = encodeURIComponent(value);
-        document.cookie = `${k}=${v}; Path=/; Max-Age=${COOKIE_MAX_AGE}; SameSite=Lax${secure}`;
-      }
-    } catch {
-    }
-  }
-};
-var _storage = localStorageBackend;
-var _storageMode = "localStorage";
-function detectLocale() {
-  try {
-    if (typeof document !== "undefined") {
-      const m = document.cookie.match(/(?:^|;\s*)NEXT_LOCALE=([^;]*)/);
-      if (m) return decodeURIComponent(m[1]);
-    }
-    if (typeof navigator !== "undefined" && navigator.language) {
-      return navigator.language;
-    }
-  } catch {
-  }
-  return null;
-}
-__name(detectLocale, "detectLocale");
-function defaultBaseUrl() {
-  if (typeof window !== "undefined") {
-    try {
-      if (typeof process !== "undefined" && process.env) {
-        if (process.env.NEXT_PUBLIC_STATIC_BUILD === "true") return "";
-        if (process.env.NEXT_PUBLIC_API_PROXY_URL !== void 0)
-          return process.env.NEXT_PUBLIC_API_PROXY_URL;
-        return process.env.NEXT_PUBLIC_API_URL || "";
-      }
-    } catch {
-    }
-    return "";
-  }
-  try {
-    if (typeof process !== "undefined" && process.env) {
-      if (process.env.NEXT_PUBLIC_STATIC_BUILD === "true") return "";
-      return process.env.NEXT_PUBLIC_API_URL || "";
-    }
-  } catch {
-  }
-  return "";
-}
-__name(defaultBaseUrl, "defaultBaseUrl");
-function defaultApiKey() {
-  try {
-    if (typeof process !== "undefined" && process.env?.NEXT_PUBLIC_API_KEY) {
-      return process.env.NEXT_PUBLIC_API_KEY;
-    }
-  } catch {
-  }
-  return null;
-}
-__name(defaultApiKey, "defaultApiKey");
-var _localeOverride = null;
-var _apiKeyOverride = null;
-var _baseUrlOverride = null;
-var _withCredentials = true;
-var _onUnauthorized = null;
-var _refreshHandler = null;
-var _refreshInflight = null;
-var RETRY_MARKER = "X-Auth-Retry";
-var _client = null;
-function pushClientConfig() {
-  if (!_client) return;
-  _client.setConfig({
-    baseUrl: auth.getBaseUrl(),
-    credentials: _withCredentials ? "include" : "same-origin"
-  });
-}
-__name(pushClientConfig, "pushClientConfig");
-var auth = {
-  // ── Storage mode ──────────────────────────────────────────────────
-  getStorageMode() {
-    return _storageMode;
-  },
-  setStorageMode(mode) {
-    _storageMode = mode;
-    _storage = mode === "cookie" ? cookieBackend : localStorageBackend;
-  },
-  // ── Bearer token ──────────────────────────────────────────────────
-  getToken() {
-    return _storage.get(ACCESS_KEY);
-  },
-  setToken(token) {
-    _storage.set(ACCESS_KEY, token);
-  },
-  getRefreshToken() {
-    return _storage.get(REFRESH_KEY);
-  },
-  setRefreshToken(token) {
-    _storage.set(REFRESH_KEY, token);
-  },
-  clearTokens() {
-    _storage.set(ACCESS_KEY, null);
-    _storage.set(REFRESH_KEY, null);
-  },
-  isAuthenticated() {
-    return _storage.get(ACCESS_KEY) !== null;
-  },
-  // ── API key ───────────────────────────────────────────────────────
-  getApiKey() {
-    return _apiKeyOverride ?? _storage.get(API_KEY_KEY) ?? defaultApiKey();
-  },
-  setApiKey(key) {
-    _apiKeyOverride = key;
-  },
-  setApiKeyPersist(key) {
-    _apiKeyOverride = key;
-    _storage.set(API_KEY_KEY, key);
-  },
-  clearApiKey() {
-    _apiKeyOverride = null;
-    _storage.set(API_KEY_KEY, null);
-  },
-  // ── Locale ────────────────────────────────────────────────────────
-  getLocale() {
-    return _localeOverride ?? detectLocale();
-  },
-  setLocale(locale) {
-    _localeOverride = locale;
-  },
-  // ── Base URL ──────────────────────────────────────────────────────
-  getBaseUrl() {
-    const url = _baseUrlOverride ?? defaultBaseUrl();
-    return url.replace(/\/$/, "");
-  },
-  setBaseUrl(url) {
-    _baseUrlOverride = url ? url.replace(/\/$/, "") : null;
-    pushClientConfig();
-  },
-  // ── Credentials toggle ────────────────────────────────────────────
-  getWithCredentials() {
-    return _withCredentials;
-  },
-  setWithCredentials(value) {
-    _withCredentials = value;
-    pushClientConfig();
-  },
-  // ── 401 handler ───────────────────────────────────────────────────
-  /**
-   * Fired when the server returns 401 AND no refresh path recovers it
-   * (no refresh token, no refresh handler, refresh failed, or retry
-   * still 401). The app should clear local state and redirect to login.
-   *
-   * NOT fired for 401 that gets transparently recovered by the refresh
-   * handler — those are invisible to callers.
-   */
-  onUnauthorized(cb) {
-    _onUnauthorized = cb;
-  },
-  /**
-   * Register the refresh strategy. The handler receives the current
-   * refresh token and must call your refresh endpoint, returning
-   * `{ access, refresh? }` on success or `null` on failure.
-   *
-   * @example
-   *   auth.setRefreshHandler(async (refresh) => {
-   *     const { data } = await Auth.tokenRefreshCreate({ body: { refresh } });
-   *     return data ? { access: data.access, refresh: data.refresh } : null;
-   *   });
-   */
-  setRefreshHandler(fn) {
-    _refreshHandler = fn;
-  },
-  /**
-   * Proactively run the registered refresh handler right now, reusing the
-   * SAME single-flight promise as the 401-recovery interceptor. Callers
-   * (e.g. an expiry timer / focus / reconnect) get token rotation,
-   * de-duplication and rotated-token persistence for free — they must NOT
-   * re-implement any of it. Returns the fresh access token, or null if
-   * there is no handler / no refresh token / the refresh failed.
-   */
-  refreshNow() {
-    return tryRefresh();
-  }
-};
-async function tryRefresh() {
-  if (_refreshInflight) return _refreshInflight;
-  if (!_refreshHandler) return null;
-  const refresh = auth.getRefreshToken();
-  if (!refresh) return null;
-  _refreshInflight = (async () => {
-    try {
-      const result = await _refreshHandler(refresh);
-      if (!result?.access) return null;
-      auth.setToken(result.access);
-      if (result.refresh) auth.setRefreshToken(result.refresh);
-      return result.access;
-    } catch {
-      return null;
-    } finally {
-      _refreshInflight = null;
-    }
-  })();
-  return _refreshInflight;
-}
-__name(tryRefresh, "tryRefresh");
-function dpopEnabled() {
-  try {
-    return typeof process !== "undefined" && process.env?.NEXT_PUBLIC_DPOP_ENABLED === "true";
-  } catch {
-    return false;
-  }
-}
-__name(dpopEnabled, "dpopEnabled");
-var _DPOP_DB = "cfg-auth";
-var _DPOP_STORE = "keys";
-var _DPOP_KEY_ID = "dpop-ec-p256";
-function _idbOpen() {
-  return new Promise((resolve, reject) => {
-    const req = indexedDB.open(_DPOP_DB, 1);
-    req.onupgradeneeded = () => req.result.createObjectStore(_DPOP_STORE);
-    req.onsuccess = () => resolve(req.result);
-    req.onerror = () => reject(req.error);
-  });
-}
-__name(_idbOpen, "_idbOpen");
-function _idbGet(key) {
-  return _idbOpen().then((db) => new Promise((resolve, reject) => {
-    const tx = db.transaction(_DPOP_STORE, "readonly");
-    const req = tx.objectStore(_DPOP_STORE).get(key);
-    req.onsuccess = () => resolve(req.result);
-    req.onerror = () => reject(req.error);
-  }));
-}
-__name(_idbGet, "_idbGet");
-function _idbPut(key, value) {
-  return _idbOpen().then((db) => new Promise((resolve, reject) => {
-    const tx = db.transaction(_DPOP_STORE, "readwrite");
-    tx.objectStore(_DPOP_STORE).put(value, key);
-    tx.oncomplete = () => resolve();
-    tx.onerror = () => reject(tx.error);
-  }));
-}
-__name(_idbPut, "_idbPut");
-var _dpopKeyPromise = null;
-function _getDpopKeyPair() {
-  if (_dpopKeyPromise) return _dpopKeyPromise;
-  _dpopKeyPromise = (async () => {
-    const existing = await _idbGet(_DPOP_KEY_ID).catch(() => void 0);
-    if (existing) return existing;
-    const pair = await crypto.subtle.generateKey(
-      { name: "ECDSA", namedCurve: "P-256" },
-      false,
-      // extractable:false — JS can sign but never export the private key
-      ["sign"]
-    );
-    await _idbPut(_DPOP_KEY_ID, pair).catch(() => {
-    });
-    return pair;
-  })();
-  return _dpopKeyPromise;
-}
-__name(_getDpopKeyPair, "_getDpopKeyPair");
-function _b64urlFromBytes(bytes) {
-  const arr = bytes instanceof Uint8Array ? bytes : new Uint8Array(bytes);
-  let s = "";
-  for (let i = 0; i < arr.length; i++) s += String.fromCharCode(arr[i]);
-  return btoa(s).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-}
-__name(_b64urlFromBytes, "_b64urlFromBytes");
-function _b64urlFromString(str) {
-  return _b64urlFromBytes(new TextEncoder().encode(str));
-}
-__name(_b64urlFromString, "_b64urlFromString");
-async function _publicJwk(pub) {
-  const jwk = await crypto.subtle.exportKey("jwk", pub);
-  return { kty: "EC", crv: "P-256", x: jwk.x, y: jwk.y };
-}
-__name(_publicJwk, "_publicJwk");
-async function _makeDpopProof(method, url) {
-  try {
-    const pair = await _getDpopKeyPair();
-    const jwk = await _publicJwk(pair.publicKey);
-    const header = { typ: "dpop+jwt", alg: "ES256", jwk };
-    const htu = url.split("#")[0].split("?")[0];
-    const jti = crypto.randomUUID && crypto.randomUUID() || _b64urlFromBytes(crypto.getRandomValues(new Uint8Array(16)));
-    const payload = { htm: method.toUpperCase(), htu, iat: Math.floor(Date.now() / 1e3), jti };
-    const signingInput = `${_b64urlFromString(JSON.stringify(header))}.${_b64urlFromString(JSON.stringify(payload))}`;
-    const sig = await crypto.subtle.sign(
-      { name: "ECDSA", hash: "SHA-256" },
-      pair.privateKey,
-      new TextEncoder().encode(signingInput)
-    );
-    return `${signingInput}.${_b64urlFromBytes(sig)}`;
-  } catch {
-    return null;
-  }
-}
-__name(_makeDpopProof, "_makeDpopProof");
-function installAuthOnClient(client2) {
-  if (_client) return;
-  _client = client2;
-  client2.setConfig({
-    baseUrl: auth.getBaseUrl(),
-    credentials: _withCredentials ? "include" : "same-origin"
-  });
-  client2.interceptors.request.use(async (request) => {
-    const token = auth.getToken();
-    if (token) request.headers.set("Authorization", `Bearer ${token}`);
-    const locale = auth.getLocale();
-    if (locale) request.headers.set("Accept-Language", locale);
-    const apiKey = auth.getApiKey();
-    if (apiKey && !request.headers.has("X-API-Key")) request.headers.set("X-API-Key", apiKey);
-    try {
-      const tz = Intl.DateTimeFormat().resolvedOptions().timeZone;
-      if (tz) request.headers.set("X-Timezone", tz);
-    } catch {
-    }
-    request.headers.set("X-Client-Time", (/* @__PURE__ */ new Date()).toISOString());
-    if (dpopEnabled() && typeof window !== "undefined") {
-      const proof = await _makeDpopProof(request.method, request.url);
-      if (proof) request.headers.set("DPoP", proof);
-    }
-    return request;
-  });
-  client2.interceptors.error.use((err, res, req) => {
-    if (err instanceof APIError) return err;
-    const url = req?.url ?? "";
-    const status = res?.status ?? 0;
-    const statusText = res?.statusText ?? "";
-    return new APIError(status, statusText, err, url);
-  });
-  client2.interceptors.response.use(async (response, request) => {
-    if (response.status !== 401) return response;
-    if (request.headers.get(RETRY_MARKER)) {
-      if (_onUnauthorized) {
-        try {
-          _onUnauthorized(response);
-        } catch {
-        }
-      }
-      return response;
-    }
-    const newToken = await tryRefresh();
-    if (!newToken) {
-      if (_onUnauthorized) {
-        try {
-          _onUnauthorized(response);
-        } catch {
-        }
-      }
-      return response;
-    }
-    const retry = request.clone();
-    retry.headers.set("Authorization", `Bearer ${newToken}`);
-    retry.headers.set(RETRY_MARKER, "1");
-    if (dpopEnabled() && typeof window !== "undefined") {
-      const proof = await _makeDpopProof(retry.method, retry.url);
-      if (proof) retry.headers.set("DPoP", proof);
-    }
-    try {
-      const retried = await fetch(retry);
-      if (retried.status === 401 && _onUnauthorized) {
-        try {
-          _onUnauthorized(retried);
-        } catch {
-        }
-      }
-      return retried;
-    } catch {
-      if (_onUnauthorized) {
-        try {
-          _onUnauthorized(response);
-        } catch {
-        }
-      }
-      return response;
-    }
-  });
-}
-__name(installAuthOnClient, "installAuthOnClient");
-
-// src/_api/generated/helpers/logger.ts
-var import_consola = require("consola");
-var DEFAULT_CONFIG = {
-  enabled: typeof process !== "undefined" && process.env.NODE_ENV !== "production",
-  logRequests: true,
-  logResponses: true,
-  logErrors: true,
-  logBodies: true,
-  logHeaders: false
-};
-var SENSITIVE_HEADERS = [
-  "authorization",
-  "cookie",
-  "set-cookie",
-  "x-api-key",
-  "x-csrf-token"
-];
-var APILogger = class {
-  static {
-    __name(this, "APILogger");
-  }
-  config;
-  consola;
-  constructor(config = {}) {
-    this.config = { ...DEFAULT_CONFIG, ...config };
-    this.consola = config.consola || (0, import_consola.createConsola)({
-      level: this.config.enabled ? 4 : 0
-    });
-  }
-  enable() {
-    this.config.enabled = true;
-  }
-  disable() {
-    this.config.enabled = false;
-  }
-  setConfig(config) {
-    this.config = { ...this.config, ...config };
-  }
-  filterHeaders(headers) {
-    if (!headers) return {};
-    const filtered = {};
-    Object.keys(headers).forEach((key) => {
-      filtered[key] = SENSITIVE_HEADERS.includes(key.toLowerCase()) ? "***" : headers[key] || "";
-    });
-    return filtered;
-  }
-  logRequest(request) {
-    if (!this.config.enabled || !this.config.logRequests) return;
-    const { method, url, headers, body } = request;
-    this.consola.start(`${method} ${url}`);
-    if (this.config.logHeaders && headers) this.consola.debug("Headers:", this.filterHeaders(headers));
-    if (this.config.logBodies && body) this.consola.debug("Body:", body);
-  }
-  logResponse(request, response) {
-    if (!this.config.enabled || !this.config.logResponses) return;
-    const { method, url } = request;
-    const { status, statusText, data, duration } = response;
-    this.consola.success(`${method} ${url} ${status} ${statusText} (${duration}ms)`);
-    if (this.config.logBodies && data) this.consola.debug("Response:", data);
-  }
-  logError(request, error) {
-    if (!this.config.enabled || !this.config.logErrors) return;
-    const { method, url } = request;
-    const { message, statusCode, fieldErrors, duration } = error;
-    this.consola.error(`${method} ${url} ${statusCode || "Network"} Error (${duration}ms)`);
-    this.consola.error("Message:", message);
-    if (fieldErrors && Object.keys(fieldErrors).length > 0) {
-      this.consola.error("Field Errors:");
-      Object.entries(fieldErrors).forEach(([field, errors]) => {
-        errors.forEach((err) => this.consola.error(`  \u2022 ${field}: ${err}`));
-      });
-    }
-  }
-  info(message, ...args) {
-    if (this.config.enabled) this.consola.info(message, ...args);
-  }
-  warn(message, ...args) {
-    if (this.config.enabled) this.consola.warn(message, ...args);
-  }
-  error(message, ...args) {
-    if (this.config.enabled) this.consola.error(message, ...args);
-  }
-  debug(message, ...args) {
-    if (this.config.enabled) this.consola.debug(message, ...args);
-  }
-  success(message, ...args) {
-    if (this.config.enabled) this.consola.success(message, ...args);
-  }
-  withTag(tag) {
-    return this.consola.withTag(tag);
-  }
-};
-var defaultLogger = new APILogger();
-
-// src/_api/generated/core/bodySerializer.gen.ts
-var serializeFormDataPair = /* @__PURE__ */ __name((data, key, value) => {
-  if (typeof value === "string" || value instanceof Blob) {
-    data.append(key, value);
-  } else if (value instanceof Date) {
-    data.append(key, value.toISOString());
-  } else {
-    data.append(key, JSON.stringify(value));
-  }
-}, "serializeFormDataPair");
-var formDataBodySerializer = {
-  bodySerializer: /* @__PURE__ */ __name((body) => {
-    const data = new FormData();
-    Object.entries(body).forEach(([key, value]) => {
-      if (value === void 0 || value === null) {
-        return;
-      }
-      if (Array.isArray(value)) {
-        value.forEach((v) => serializeFormDataPair(data, key, v));
-      } else {
-        serializeFormDataPair(data, key, value);
-      }
-    });
-    return data;
-  }, "bodySerializer")
-};
-var jsonBodySerializer = {
-  bodySerializer: /* @__PURE__ */ __name((body) => JSON.stringify(body, (_key, value) => typeof value === "bigint" ? value.toString() : value), "bodySerializer")
-};
-
-// src/_api/generated/core/params.gen.ts
-var extraPrefixesMap = {
-  $body_: "body",
-  $headers_: "headers",
-  $path_: "path",
-  $query_: "query"
-};
-var extraPrefixes = Object.entries(extraPrefixesMap);
-
-// src/_api/generated/core/serverSentEvents.gen.ts
-function createSseClient({
-  onRequest,
-  onSseError,
-  onSseEvent,
-  responseTransformer,
-  responseValidator,
-  sseDefaultRetryDelay,
-  sseMaxRetryAttempts,
-  sseMaxRetryDelay,
-  sseSleepFn,
-  url,
-  ...options
-}) {
-  let lastEventId;
-  const sleep = sseSleepFn ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
-  const createStream = /* @__PURE__ */ __name(async function* () {
-    let retryDelay = sseDefaultRetryDelay ?? 3e3;
-    let attempt = 0;
-    const signal = options.signal ?? new AbortController().signal;
-    while (true) {
-      if (signal.aborted) break;
-      attempt++;
-      const headers = options.headers instanceof Headers ? options.headers : new Headers(options.headers);
-      if (lastEventId !== void 0) {
-        headers.set("Last-Event-ID", lastEventId);
-      }
-      try {
-        const requestInit = {
-          redirect: "follow",
-          ...options,
-          body: options.serializedBody,
-          headers,
-          signal
-        };
-        let request = new Request(url, requestInit);
-        if (onRequest) {
-          request = await onRequest(url, requestInit);
-        }
-        const _fetch = options.fetch ?? globalThis.fetch;
-        const response = await _fetch(request);
-        if (!response.ok) throw new Error(`SSE failed: ${response.status} ${response.statusText}`);
-        if (!response.body) throw new Error("No body in SSE response");
-        const reader = response.body.pipeThrough(new TextDecoderStream()).getReader();
-        let buffer = "";
-        const abortHandler = /* @__PURE__ */ __name(() => {
-          try {
-            reader.cancel();
-          } catch {
-          }
-        }, "abortHandler");
-        signal.addEventListener("abort", abortHandler);
-        try {
-          while (true) {
-            const { done, value } = await reader.read();
-            if (done) break;
-            buffer += value;
-            buffer = buffer.replace(/\r\n?/g, "\n");
-            const chunks = buffer.split("\n\n");
-            buffer = chunks.pop() ?? "";
-            for (const chunk of chunks) {
-              const lines = chunk.split("\n");
-              const dataLines = [];
-              let eventName;
-              for (const line of lines) {
-                if (line.startsWith("data:")) {
-                  dataLines.push(line.replace(/^data:\s*/, ""));
-                } else if (line.startsWith("event:")) {
-                  eventName = line.replace(/^event:\s*/, "");
-                } else if (line.startsWith("id:")) {
-                  lastEventId = line.replace(/^id:\s*/, "");
-                } else if (line.startsWith("retry:")) {
-                  const parsed = Number.parseInt(line.replace(/^retry:\s*/, ""), 10);
-                  if (!Number.isNaN(parsed)) {
-                    retryDelay = parsed;
-                  }
-                }
-              }
-              let data;
-              let parsedJson = false;
-              if (dataLines.length) {
-                const rawData = dataLines.join("\n");
-                try {
-                  data = JSON.parse(rawData);
-                  parsedJson = true;
-                } catch {
-                  data = rawData;
-                }
-              }
-              if (parsedJson) {
-                if (responseValidator) {
-                  await responseValidator(data);
-                }
-                if (responseTransformer) {
-                  data = await responseTransformer(data);
-                }
-              }
-              onSseEvent?.({
-                data,
-                event: eventName,
-                id: lastEventId,
-                retry: retryDelay
-              });
-              if (dataLines.length) {
-                yield data;
-              }
-            }
-          }
-        } finally {
-          signal.removeEventListener("abort", abortHandler);
-          reader.releaseLock();
-        }
-        break;
-      } catch (error) {
-        onSseError?.(error);
-        if (sseMaxRetryAttempts !== void 0 && attempt >= sseMaxRetryAttempts) {
-          break;
-        }
-        const backoff = Math.min(retryDelay * 2 ** (attempt - 1), sseMaxRetryDelay ?? 3e4);
-        await sleep(backoff);
-      }
-    }
-  }, "createStream");
-  const stream = createStream();
-  return { stream };
-}
-__name(createSseClient, "createSseClient");
-
-// src/_api/generated/core/pathSerializer.gen.ts
-var separatorArrayExplode = /* @__PURE__ */ __name((style) => {
-  switch (style) {
-    case "label":
-      return ".";
-    case "matrix":
-      return ";";
-    case "simple":
-      return ",";
-    default:
-      return "&";
-  }
-}, "separatorArrayExplode");
-var separatorArrayNoExplode = /* @__PURE__ */ __name((style) => {
-  switch (style) {
-    case "form":
-      return ",";
-    case "pipeDelimited":
-      return "|";
-    case "spaceDelimited":
-      return "%20";
-    default:
-      return ",";
-  }
-}, "separatorArrayNoExplode");
-var separatorObjectExplode = /* @__PURE__ */ __name((style) => {
-  switch (style) {
-    case "label":
-      return ".";
-    case "matrix":
-      return ";";
-    case "simple":
-      return ",";
-    default:
-      return "&";
-  }
-}, "separatorObjectExplode");
-var serializeArrayParam = /* @__PURE__ */ __name(({
-  allowReserved,
-  explode,
-  name,
-  style,
-  value
-}) => {
-  if (!explode) {
-    const joinedValues2 = (allowReserved ? value : value.map((v) => encodeURIComponent(v))).join(separatorArrayNoExplode(style));
-    switch (style) {
-      case "label":
-        return `.${joinedValues2}`;
-      case "matrix":
-        return `;${name}=${joinedValues2}`;
-      case "simple":
-        return joinedValues2;
-      default:
-        return `${name}=${joinedValues2}`;
-    }
-  }
-  const separator = separatorArrayExplode(style);
-  const joinedValues = value.map((v) => {
-    if (style === "label" || style === "simple") {
-      return allowReserved ? v : encodeURIComponent(v);
-    }
-    return serializePrimitiveParam({
-      allowReserved,
-      name,
-      value: v
-    });
-  }).join(separator);
-  return style === "label" || style === "matrix" ? separator + joinedValues : joinedValues;
-}, "serializeArrayParam");
-var serializePrimitiveParam = /* @__PURE__ */ __name(({
-  allowReserved,
-  name,
-  value
-}) => {
-  if (value === void 0 || value === null) {
-    return "";
-  }
-  if (typeof value === "object") {
-    throw new Error(
-      "Deeply-nested arrays/objects aren\u2019t supported. Provide your own `querySerializer()` to handle these."
-    );
-  }
-  return `${name}=${allowReserved ? value : encodeURIComponent(value)}`;
-}, "serializePrimitiveParam");
-var serializeObjectParam = /* @__PURE__ */ __name(({
-  allowReserved,
-  explode,
-  name,
-  style,
-  value,
-  valueOnly
-}) => {
-  if (value instanceof Date) {
-    return valueOnly ? value.toISOString() : `${name}=${value.toISOString()}`;
-  }
-  if (style !== "deepObject" && !explode) {
-    let values = [];
-    Object.entries(value).forEach(([key, v]) => {
-      values = [...values, key, allowReserved ? v : encodeURIComponent(v)];
-    });
-    const joinedValues2 = values.join(",");
-    switch (style) {
-      case "form":
-        return `${name}=${joinedValues2}`;
-      case "label":
-        return `.${joinedValues2}`;
-      case "matrix":
-        return `;${name}=${joinedValues2}`;
-      default:
-        return joinedValues2;
-    }
-  }
-  const separator = separatorObjectExplode(style);
-  const joinedValues = Object.entries(value).map(
-    ([key, v]) => serializePrimitiveParam({
-      allowReserved,
-      name: style === "deepObject" ? `${name}[${key}]` : key,
-      value: v
-    })
-  ).join(separator);
-  return style === "label" || style === "matrix" ? separator + joinedValues : joinedValues;
-}, "serializeObjectParam");
-
-// src/_api/generated/core/utils.gen.ts
-var PATH_PARAM_RE = /\{[^{}]+\}/g;
-var defaultPathSerializer = /* @__PURE__ */ __name(({ path, url: _url }) => {
-  let url = _url;
-  const matches = _url.match(PATH_PARAM_RE);
-  if (matches) {
-    for (const match of matches) {
-      let explode = false;
-      let name = match.substring(1, match.length - 1);
-      let style = "simple";
-      if (name.endsWith("*")) {
-        explode = true;
-        name = name.substring(0, name.length - 1);
-      }
-      if (name.startsWith(".")) {
-        name = name.substring(1);
-        style = "label";
-      } else if (name.startsWith(";")) {
-        name = name.substring(1);
-        style = "matrix";
-      }
-      const value = path[name];
-      if (value === void 0 || value === null) {
-        continue;
-      }
-      if (Array.isArray(value)) {
-        url = url.replace(match, serializeArrayParam({ explode, name, style, value }));
-        continue;
-      }
-      if (typeof value === "object") {
-        url = url.replace(
-          match,
-          serializeObjectParam({
-            explode,
-            name,
-            style,
-            value,
-            valueOnly: true
-          })
-        );
-        continue;
-      }
-      if (style === "matrix") {
-        url = url.replace(
-          match,
-          `;${serializePrimitiveParam({
-            name,
-            value
-          })}`
-        );
-        continue;
-      }
-      const replaceValue = encodeURIComponent(
-        style === "label" ? `.${value}` : value
-      );
-      url = url.replace(match, replaceValue);
-    }
-  }
-  return url;
-}, "defaultPathSerializer");
-var getUrl = /* @__PURE__ */ __name(({
-  baseUrl,
-  path,
-  query,
-  querySerializer,
-  url: _url
-}) => {
-  const pathUrl = _url.startsWith("/") ? _url : `/${_url}`;
-  let url = (baseUrl ?? "") + pathUrl;
-  if (path) {
-    url = defaultPathSerializer({ path, url });
-  }
-  let search = query ? querySerializer(query) : "";
-  if (search.startsWith("?")) {
-    search = search.substring(1);
-  }
-  if (search) {
-    url += `?${search}`;
-  }
-  return url;
-}, "getUrl");
-function getValidRequestBody(options) {
-  const hasBody = options.body !== void 0;
-  const isSerializedBody = hasBody && options.bodySerializer;
-  if (isSerializedBody) {
-    if ("serializedBody" in options) {
-      const hasSerializedBody = options.serializedBody !== void 0 && options.serializedBody !== "";
-      return hasSerializedBody ? options.serializedBody : null;
+// src/_api/generated/core/utils.gen.ts
+function getValidRequestBody(options) {
+  const hasBody = options.body !== void 0;
+  const isSerializedBody = hasBody && options.bodySerializer;
+  if (isSerializedBody) {
+    if ("serializedBody" in options) {
+      const hasSerializedBody = options.serializedBody !== void 0 && options.serializedBody !== "";
+      return hasSerializedBody ? options.serializedBody : null;
     }
     return options.body !== "" ? options.body : null;
   }
@@ -1031,102 +428,115 @@ function getValidRequestBody(options) {
   }
   return void 0;
 }
-__name(getValidRequestBody, "getValidRequestBody");
+var PATH_PARAM_RE, defaultPathSerializer, getUrl;
+var init_utils_gen = __esm({
+  "src/_api/generated/core/utils.gen.ts"() {
+    init_pathSerializer_gen();
+    PATH_PARAM_RE = /\{[^{}]+\}/g;
+    defaultPathSerializer = /* @__PURE__ */ __name(({ path, url: _url }) => {
+      let url = _url;
+      const matches = _url.match(PATH_PARAM_RE);
+      if (matches) {
+        for (const match of matches) {
+          let explode = false;
+          let name = match.substring(1, match.length - 1);
+          let style = "simple";
+          if (name.endsWith("*")) {
+            explode = true;
+            name = name.substring(0, name.length - 1);
+          }
+          if (name.startsWith(".")) {
+            name = name.substring(1);
+            style = "label";
+          } else if (name.startsWith(";")) {
+            name = name.substring(1);
+            style = "matrix";
+          }
+          const value = path[name];
+          if (value === void 0 || value === null) {
+            continue;
+          }
+          if (Array.isArray(value)) {
+            url = url.replace(match, serializeArrayParam({ explode, name, style, value }));
+            continue;
+          }
+          if (typeof value === "object") {
+            url = url.replace(
+              match,
+              serializeObjectParam({
+                explode,
+                name,
+                style,
+                value,
+                valueOnly: true
+              })
+            );
+            continue;
+          }
+          if (style === "matrix") {
+            url = url.replace(
+              match,
+              `;${serializePrimitiveParam({
+                name,
+                value
+              })}`
+            );
+            continue;
+          }
+          const replaceValue = encodeURIComponent(
+            style === "label" ? `.${value}` : value
+          );
+          url = url.replace(match, replaceValue);
+        }
+      }
+      return url;
+    }, "defaultPathSerializer");
+    getUrl = /* @__PURE__ */ __name(({
+      baseUrl,
+      path,
+      query,
+      querySerializer,
+      url: _url
+    }) => {
+      const pathUrl = _url.startsWith("/") ? _url : `/${_url}`;
+      let url = (baseUrl ?? "") + pathUrl;
+      if (path) {
+        url = defaultPathSerializer({ path, url });
+      }
+      let search = query ? querySerializer(query) : "";
+      if (search.startsWith("?")) {
+        search = search.substring(1);
+      }
+      if (search) {
+        url += `?${search}`;
+      }
+      return url;
+    }, "getUrl");
+    __name(getValidRequestBody, "getValidRequestBody");
+  }
+});
 
 // src/_api/generated/core/auth.gen.ts
-var getAuthToken = /* @__PURE__ */ __name(async (auth2, callback) => {
-  const token = typeof callback === "function" ? await callback(auth2) : callback;
-  if (!token) {
-    return;
-  }
-  if (auth2.scheme === "bearer") {
-    return `Bearer ${token}`;
-  }
-  if (auth2.scheme === "basic") {
-    return `Basic ${btoa(token)}`;
+var getAuthToken;
+var init_auth_gen = __esm({
+  "src/_api/generated/core/auth.gen.ts"() {
+    getAuthToken = /* @__PURE__ */ __name(async (auth2, callback) => {
+      const token = typeof callback === "function" ? await callback(auth2) : callback;
+      if (!token) {
+        return;
+      }
+      if (auth2.scheme === "bearer") {
+        return `Bearer ${token}`;
+      }
+      if (auth2.scheme === "basic") {
+        return `Basic ${btoa(token)}`;
+      }
+      return token;
+    }, "getAuthToken");
   }
-  return token;
-}, "getAuthToken");
+});
 
 // src/_api/generated/client/utils.gen.ts
-var createQuerySerializer = /* @__PURE__ */ __name(({
-  parameters = {},
-  ...args
-} = {}) => {
-  const querySerializer = /* @__PURE__ */ __name((queryParams) => {
-    const search = [];
-    if (queryParams && typeof queryParams === "object") {
-      for (const name in queryParams) {
-        const value = queryParams[name];
-        if (value === void 0 || value === null) {
-          continue;
-        }
-        const options = parameters[name] || args;
-        if (Array.isArray(value)) {
-          const serializedArray = serializeArrayParam({
-            allowReserved: options.allowReserved,
-            explode: true,
-            name,
-            style: "form",
-            value,
-            ...options.array
-          });
-          if (serializedArray) search.push(serializedArray);
-        } else if (typeof value === "object") {
-          const serializedObject = serializeObjectParam({
-            allowReserved: options.allowReserved,
-            explode: true,
-            name,
-            style: "deepObject",
-            value,
-            ...options.object
-          });
-          if (serializedObject) search.push(serializedObject);
-        } else {
-          const serializedPrimitive = serializePrimitiveParam({
-            allowReserved: options.allowReserved,
-            name,
-            value
-          });
-          if (serializedPrimitive) search.push(serializedPrimitive);
-        }
-      }
-    }
-    return search.join("&");
-  }, "querySerializer");
-  return querySerializer;
-}, "createQuerySerializer");
-var getParseAs = /* @__PURE__ */ __name((contentType) => {
-  if (!contentType) {
-    return "stream";
-  }
-  const cleanContent = contentType.split(";")[0]?.trim();
-  if (!cleanContent) {
-    return;
-  }
-  if (cleanContent.startsWith("application/json") || cleanContent.endsWith("+json")) {
-    return "json";
-  }
-  if (cleanContent === "multipart/form-data") {
-    return "formData";
-  }
-  if (["application/", "audio/", "image/", "video/"].some((type) => cleanContent.startsWith(type))) {
-    return "blob";
-  }
-  if (cleanContent.startsWith("text/")) {
-    return "text";
-  }
-  return;
-}, "getParseAs");
-var checkForExistence = /* @__PURE__ */ __name((options, name) => {
-  if (!name) {
-    return false;
-  }
-  if (options.headers.has(name) || options.query?.[name] || options.headers.get("Cookie")?.includes(`${name}=`)) {
-    return true;
-  }
-  return false;
-}, "checkForExistence");
 async function setAuthParams(options) {
   for (const auth2 of options.security ?? []) {
     if (checkForExistence(options, auth2.name)) {
@@ -1154,861 +564,1803 @@ async function setAuthParams(options) {
     }
   }
 }
-__name(setAuthParams, "setAuthParams");
-var buildUrl = /* @__PURE__ */ __name((options) => getUrl({
-  baseUrl: options.baseUrl,
-  path: options.path,
-  query: options.query,
-  querySerializer: typeof options.querySerializer === "function" ? options.querySerializer : createQuerySerializer(options.querySerializer),
-  url: options.url
-}), "buildUrl");
-var mergeConfigs = /* @__PURE__ */ __name((a, b) => {
-  const config = { ...a, ...b };
-  if (config.baseUrl?.endsWith("/")) {
-    config.baseUrl = config.baseUrl.substring(0, config.baseUrl.length - 1);
-  }
-  config.headers = mergeHeaders(a.headers, b.headers);
-  return config;
-}, "mergeConfigs");
-var headersEntries = /* @__PURE__ */ __name((headers) => {
-  const entries = [];
-  headers.forEach((value, key) => {
-    entries.push([key, value]);
-  });
-  return entries;
-}, "headersEntries");
-var mergeHeaders = /* @__PURE__ */ __name((...headers) => {
-  const mergedHeaders = new Headers();
-  for (const header of headers) {
-    if (!header) {
-      continue;
-    }
-    const iterator = header instanceof Headers ? headersEntries(header) : Object.entries(header);
-    for (const [key, value] of iterator) {
-      if (value === null) {
-        mergedHeaders.delete(key);
-      } else if (Array.isArray(value)) {
-        for (const v of value) {
-          mergedHeaders.append(key, v);
+var createQuerySerializer, getParseAs, checkForExistence, buildUrl, mergeConfigs, headersEntries, mergeHeaders, Interceptors, createInterceptors, defaultQuerySerializer, defaultHeaders, createConfig;
+var init_utils_gen2 = __esm({
+  "src/_api/generated/client/utils.gen.ts"() {
+    init_auth_gen();
+    init_bodySerializer_gen();
+    init_pathSerializer_gen();
+    init_utils_gen();
+    createQuerySerializer = /* @__PURE__ */ __name(({
+      parameters = {},
+      ...args
+    } = {}) => {
+      const querySerializer = /* @__PURE__ */ __name((queryParams) => {
+        const search = [];
+        if (queryParams && typeof queryParams === "object") {
+          for (const name in queryParams) {
+            const value = queryParams[name];
+            if (value === void 0 || value === null) {
+              continue;
+            }
+            const options = parameters[name] || args;
+            if (Array.isArray(value)) {
+              const serializedArray = serializeArrayParam({
+                allowReserved: options.allowReserved,
+                explode: true,
+                name,
+                style: "form",
+                value,
+                ...options.array
+              });
+              if (serializedArray) search.push(serializedArray);
+            } else if (typeof value === "object") {
+              const serializedObject = serializeObjectParam({
+                allowReserved: options.allowReserved,
+                explode: true,
+                name,
+                style: "deepObject",
+                value,
+                ...options.object
+              });
+              if (serializedObject) search.push(serializedObject);
+            } else {
+              const serializedPrimitive = serializePrimitiveParam({
+                allowReserved: options.allowReserved,
+                name,
+                value
+              });
+              if (serializedPrimitive) search.push(serializedPrimitive);
+            }
+          }
         }
-      } else if (value !== void 0) {
-        mergedHeaders.set(
-          key,
-          typeof value === "object" ? JSON.stringify(value) : value
-        );
+        return search.join("&");
+      }, "querySerializer");
+      return querySerializer;
+    }, "createQuerySerializer");
+    getParseAs = /* @__PURE__ */ __name((contentType) => {
+      if (!contentType) {
+        return "stream";
       }
-    }
-  }
-  return mergedHeaders;
-}, "mergeHeaders");
-var Interceptors = class {
-  static {
-    __name(this, "Interceptors");
-  }
-  fns = [];
-  clear() {
-    this.fns = [];
-  }
-  eject(id) {
-    const index = this.getInterceptorIndex(id);
-    if (this.fns[index]) {
-      this.fns[index] = null;
-    }
-  }
-  exists(id) {
-    const index = this.getInterceptorIndex(id);
-    return Boolean(this.fns[index]);
-  }
-  getInterceptorIndex(id) {
-    if (typeof id === "number") {
-      return this.fns[id] ? id : -1;
-    }
-    return this.fns.indexOf(id);
-  }
-  update(id, fn) {
-    const index = this.getInterceptorIndex(id);
-    if (this.fns[index]) {
-      this.fns[index] = fn;
-      return id;
-    }
-    return false;
-  }
-  use(fn) {
-    this.fns.push(fn);
-    return this.fns.length - 1;
-  }
-};
-var createInterceptors = /* @__PURE__ */ __name(() => ({
-  error: new Interceptors(),
-  request: new Interceptors(),
-  response: new Interceptors()
-}), "createInterceptors");
-var defaultQuerySerializer = createQuerySerializer({
-  allowReserved: false,
-  array: {
-    explode: true,
-    style: "form"
-  },
-  object: {
-    explode: true,
-    style: "deepObject"
+      const cleanContent = contentType.split(";")[0]?.trim();
+      if (!cleanContent) {
+        return;
+      }
+      if (cleanContent.startsWith("application/json") || cleanContent.endsWith("+json")) {
+        return "json";
+      }
+      if (cleanContent === "multipart/form-data") {
+        return "formData";
+      }
+      if (["application/", "audio/", "image/", "video/"].some((type) => cleanContent.startsWith(type))) {
+        return "blob";
+      }
+      if (cleanContent.startsWith("text/")) {
+        return "text";
+      }
+      return;
+    }, "getParseAs");
+    checkForExistence = /* @__PURE__ */ __name((options, name) => {
+      if (!name) {
+        return false;
+      }
+      if (options.headers.has(name) || options.query?.[name] || options.headers.get("Cookie")?.includes(`${name}=`)) {
+        return true;
+      }
+      return false;
+    }, "checkForExistence");
+    __name(setAuthParams, "setAuthParams");
+    buildUrl = /* @__PURE__ */ __name((options) => getUrl({
+      baseUrl: options.baseUrl,
+      path: options.path,
+      query: options.query,
+      querySerializer: typeof options.querySerializer === "function" ? options.querySerializer : createQuerySerializer(options.querySerializer),
+      url: options.url
+    }), "buildUrl");
+    mergeConfigs = /* @__PURE__ */ __name((a, b) => {
+      const config = { ...a, ...b };
+      if (config.baseUrl?.endsWith("/")) {
+        config.baseUrl = config.baseUrl.substring(0, config.baseUrl.length - 1);
+      }
+      config.headers = mergeHeaders(a.headers, b.headers);
+      return config;
+    }, "mergeConfigs");
+    headersEntries = /* @__PURE__ */ __name((headers) => {
+      const entries = [];
+      headers.forEach((value, key) => {
+        entries.push([key, value]);
+      });
+      return entries;
+    }, "headersEntries");
+    mergeHeaders = /* @__PURE__ */ __name((...headers) => {
+      const mergedHeaders = new Headers();
+      for (const header of headers) {
+        if (!header) {
+          continue;
+        }
+        const iterator = header instanceof Headers ? headersEntries(header) : Object.entries(header);
+        for (const [key, value] of iterator) {
+          if (value === null) {
+            mergedHeaders.delete(key);
+          } else if (Array.isArray(value)) {
+            for (const v of value) {
+              mergedHeaders.append(key, v);
+            }
+          } else if (value !== void 0) {
+            mergedHeaders.set(
+              key,
+              typeof value === "object" ? JSON.stringify(value) : value
+            );
+          }
+        }
+      }
+      return mergedHeaders;
+    }, "mergeHeaders");
+    Interceptors = class {
+      static {
+        __name(this, "Interceptors");
+      }
+      fns = [];
+      clear() {
+        this.fns = [];
+      }
+      eject(id) {
+        const index = this.getInterceptorIndex(id);
+        if (this.fns[index]) {
+          this.fns[index] = null;
+        }
+      }
+      exists(id) {
+        const index = this.getInterceptorIndex(id);
+        return Boolean(this.fns[index]);
+      }
+      getInterceptorIndex(id) {
+        if (typeof id === "number") {
+          return this.fns[id] ? id : -1;
+        }
+        return this.fns.indexOf(id);
+      }
+      update(id, fn) {
+        const index = this.getInterceptorIndex(id);
+        if (this.fns[index]) {
+          this.fns[index] = fn;
+          return id;
+        }
+        return false;
+      }
+      use(fn) {
+        this.fns.push(fn);
+        return this.fns.length - 1;
+      }
+    };
+    createInterceptors = /* @__PURE__ */ __name(() => ({
+      error: new Interceptors(),
+      request: new Interceptors(),
+      response: new Interceptors()
+    }), "createInterceptors");
+    defaultQuerySerializer = createQuerySerializer({
+      allowReserved: false,
+      array: {
+        explode: true,
+        style: "form"
+      },
+      object: {
+        explode: true,
+        style: "deepObject"
+      }
+    });
+    defaultHeaders = {
+      "Content-Type": "application/json"
+    };
+    createConfig = /* @__PURE__ */ __name((override = {}) => ({
+      ...jsonBodySerializer,
+      headers: defaultHeaders,
+      parseAs: "auto",
+      querySerializer: defaultQuerySerializer,
+      ...override
+    }), "createConfig");
   }
 });
-var defaultHeaders = {
-  "Content-Type": "application/json"
-};
-var createConfig = /* @__PURE__ */ __name((override = {}) => ({
-  ...jsonBodySerializer,
-  headers: defaultHeaders,
-  parseAs: "auto",
-  querySerializer: defaultQuerySerializer,
-  ...override
-}), "createConfig");
 
 // src/_api/generated/client/client.gen.ts
-var createClient = /* @__PURE__ */ __name((config = {}) => {
-  let _config = mergeConfigs(createConfig(), config);
-  const getConfig = /* @__PURE__ */ __name(() => ({ ..._config }), "getConfig");
-  const setConfig = /* @__PURE__ */ __name((config2) => {
-    _config = mergeConfigs(_config, config2);
-    return getConfig();
-  }, "setConfig");
-  const interceptors = createInterceptors();
-  const beforeRequest = /* @__PURE__ */ __name(async (options) => {
-    const opts = {
-      ..._config,
-      ...options,
-      fetch: options.fetch ?? _config.fetch ?? globalThis.fetch,
-      headers: mergeHeaders(_config.headers, options.headers),
-      serializedBody: void 0
-    };
-    if (opts.security) {
-      await setAuthParams(opts);
-    }
-    if (opts.requestValidator) {
-      await opts.requestValidator(opts);
-    }
-    if (opts.body !== void 0 && opts.bodySerializer) {
-      opts.serializedBody = opts.bodySerializer(opts.body);
-    }
-    if (opts.body === void 0 || opts.serializedBody === "") {
-      opts.headers.delete("Content-Type");
-    }
-    const resolvedOpts = opts;
-    const url = buildUrl(resolvedOpts);
-    return { opts: resolvedOpts, url };
-  }, "beforeRequest");
-  const request = /* @__PURE__ */ __name(async (options) => {
-    const throwOnError = options.throwOnError ?? _config.throwOnError;
-    const responseStyle = options.responseStyle ?? _config.responseStyle;
-    let request2;
-    let response;
-    try {
-      const { opts, url } = await beforeRequest(options);
-      const requestInit = {
-        redirect: "follow",
-        ...opts,
-        body: getValidRequestBody(opts)
-      };
-      request2 = new Request(url, requestInit);
-      for (const fn of interceptors.request.fns) {
-        if (fn) {
-          request2 = await fn(request2, opts);
+var createClient;
+var init_client_gen = __esm({
+  "src/_api/generated/client/client.gen.ts"() {
+    init_serverSentEvents_gen();
+    init_utils_gen();
+    init_utils_gen2();
+    createClient = /* @__PURE__ */ __name((config = {}) => {
+      let _config = mergeConfigs(createConfig(), config);
+      const getConfig = /* @__PURE__ */ __name(() => ({ ..._config }), "getConfig");
+      const setConfig = /* @__PURE__ */ __name((config2) => {
+        _config = mergeConfigs(_config, config2);
+        return getConfig();
+      }, "setConfig");
+      const interceptors = createInterceptors();
+      const beforeRequest = /* @__PURE__ */ __name(async (options) => {
+        const opts = {
+          ..._config,
+          ...options,
+          fetch: options.fetch ?? _config.fetch ?? globalThis.fetch,
+          headers: mergeHeaders(_config.headers, options.headers),
+          serializedBody: void 0
+        };
+        if (opts.security) {
+          await setAuthParams(opts);
         }
-      }
-      const _fetch = opts.fetch;
-      response = await _fetch(request2);
-      for (const fn of interceptors.response.fns) {
-        if (fn) {
-          response = await fn(response, request2, opts);
+        if (opts.requestValidator) {
+          await opts.requestValidator(opts);
         }
-      }
-      const result = {
-        request: request2,
-        response
-      };
-      if (response.ok) {
-        const parseAs = (opts.parseAs === "auto" ? getParseAs(response.headers.get("Content-Type")) : opts.parseAs) ?? "json";
-        if (response.status === 204 || response.headers.get("Content-Length") === "0") {
-          let emptyData;
-          switch (parseAs) {
-            case "arrayBuffer":
-            case "blob":
-            case "text":
-              emptyData = await response[parseAs]();
-              break;
-            case "formData":
-              emptyData = new FormData();
-              break;
-            case "stream":
-              emptyData = response.body;
-              break;
-            case "json":
-            default:
-              emptyData = {};
-              break;
-          }
-          return opts.responseStyle === "data" ? emptyData : {
-            data: emptyData,
-            ...result
-          };
+        if (opts.body !== void 0 && opts.bodySerializer) {
+          opts.serializedBody = opts.bodySerializer(opts.body);
         }
-        let data;
-        switch (parseAs) {
-          case "arrayBuffer":
-          case "blob":
-          case "formData":
-          case "text":
-            data = await response[parseAs]();
-            break;
-          case "json": {
-            const text = await response.text();
-            data = text ? JSON.parse(text) : {};
-            break;
+        if (opts.body === void 0 || opts.serializedBody === "") {
+          opts.headers.delete("Content-Type");
+        }
+        const resolvedOpts = opts;
+        const url = buildUrl(resolvedOpts);
+        return { opts: resolvedOpts, url };
+      }, "beforeRequest");
+      const request = /* @__PURE__ */ __name(async (options) => {
+        const throwOnError = options.throwOnError ?? _config.throwOnError;
+        const responseStyle = options.responseStyle ?? _config.responseStyle;
+        let request2;
+        let response;
+        try {
+          const { opts, url } = await beforeRequest(options);
+          const requestInit = {
+            redirect: "follow",
+            ...opts,
+            body: getValidRequestBody(opts)
+          };
+          request2 = new Request(url, requestInit);
+          for (const fn of interceptors.request.fns) {
+            if (fn) {
+              request2 = await fn(request2, opts);
+            }
+          }
+          const _fetch = opts.fetch;
+          response = await _fetch(request2);
+          for (const fn of interceptors.response.fns) {
+            if (fn) {
+              response = await fn(response, request2, opts);
+            }
           }
-          case "stream":
-            return opts.responseStyle === "data" ? response.body : {
-              data: response.body,
+          const result = {
+            request: request2,
+            response
+          };
+          if (response.ok) {
+            const parseAs = (opts.parseAs === "auto" ? getParseAs(response.headers.get("Content-Type")) : opts.parseAs) ?? "json";
+            if (response.status === 204 || response.headers.get("Content-Length") === "0") {
+              let emptyData;
+              switch (parseAs) {
+                case "arrayBuffer":
+                case "blob":
+                case "text":
+                  emptyData = await response[parseAs]();
+                  break;
+                case "formData":
+                  emptyData = new FormData();
+                  break;
+                case "stream":
+                  emptyData = response.body;
+                  break;
+                case "json":
+                default:
+                  emptyData = {};
+                  break;
+              }
+              return opts.responseStyle === "data" ? emptyData : {
+                data: emptyData,
+                ...result
+              };
+            }
+            let data;
+            switch (parseAs) {
+              case "arrayBuffer":
+              case "blob":
+              case "formData":
+              case "text":
+                data = await response[parseAs]();
+                break;
+              case "json": {
+                const text = await response.text();
+                data = text ? JSON.parse(text) : {};
+                break;
+              }
+              case "stream":
+                return opts.responseStyle === "data" ? response.body : {
+                  data: response.body,
+                  ...result
+                };
+            }
+            if (parseAs === "json") {
+              if (opts.responseValidator) {
+                await opts.responseValidator(data);
+              }
+              if (opts.responseTransformer) {
+                data = await opts.responseTransformer(data);
+              }
+            }
+            return opts.responseStyle === "data" ? data : {
+              data,
               ...result
             };
-        }
-        if (parseAs === "json") {
-          if (opts.responseValidator) {
-            await opts.responseValidator(data);
           }
-          if (opts.responseTransformer) {
-            data = await opts.responseTransformer(data);
+          const textError = await response.text();
+          let jsonError;
+          try {
+            jsonError = JSON.parse(textError);
+          } catch {
+          }
+          throw jsonError ?? textError;
+        } catch (error) {
+          let finalError = error;
+          for (const fn of interceptors.error.fns) {
+            if (fn) {
+              finalError = await fn(finalError, response, request2, options);
+            }
+          }
+          finalError = finalError || {};
+          if (throwOnError) {
+            throw finalError;
           }
+          return responseStyle === "data" ? void 0 : {
+            error: finalError,
+            request: request2,
+            response
+          };
         }
-        return opts.responseStyle === "data" ? data : {
-          data,
-          ...result
-        };
+      }, "request");
+      const makeMethodFn = /* @__PURE__ */ __name((method) => (options) => request({ ...options, method }), "makeMethodFn");
+      const makeSseFn = /* @__PURE__ */ __name((method) => async (options) => {
+        const { opts, url } = await beforeRequest(options);
+        return createSseClient({
+          ...opts,
+          body: opts.body,
+          method,
+          onRequest: /* @__PURE__ */ __name(async (url2, init) => {
+            let request2 = new Request(url2, init);
+            for (const fn of interceptors.request.fns) {
+              if (fn) {
+                request2 = await fn(request2, opts);
+              }
+            }
+            return request2;
+          }, "onRequest"),
+          serializedBody: getValidRequestBody(opts),
+          url
+        });
+      }, "makeSseFn");
+      const _buildUrl = /* @__PURE__ */ __name((options) => buildUrl({ ..._config, ...options }), "_buildUrl");
+      return {
+        buildUrl: _buildUrl,
+        connect: makeMethodFn("CONNECT"),
+        delete: makeMethodFn("DELETE"),
+        get: makeMethodFn("GET"),
+        getConfig,
+        head: makeMethodFn("HEAD"),
+        interceptors,
+        options: makeMethodFn("OPTIONS"),
+        patch: makeMethodFn("PATCH"),
+        post: makeMethodFn("POST"),
+        put: makeMethodFn("PUT"),
+        request,
+        setConfig,
+        sse: {
+          connect: makeSseFn("CONNECT"),
+          delete: makeSseFn("DELETE"),
+          get: makeSseFn("GET"),
+          head: makeSseFn("HEAD"),
+          options: makeSseFn("OPTIONS"),
+          patch: makeSseFn("PATCH"),
+          post: makeSseFn("POST"),
+          put: makeSseFn("PUT"),
+          trace: makeSseFn("TRACE")
+        },
+        trace: makeMethodFn("TRACE")
+      };
+    }, "createClient");
+  }
+});
+
+// src/_api/generated/client/index.ts
+var init_client = __esm({
+  "src/_api/generated/client/index.ts"() {
+    init_bodySerializer_gen();
+    init_params_gen();
+    init_queryKeySerializer_gen();
+    init_client_gen();
+    init_utils_gen2();
+  }
+});
+
+// src/_api/generated/client.gen.ts
+var client;
+var init_client_gen2 = __esm({
+  "src/_api/generated/client.gen.ts"() {
+    init_client();
+    init_auth();
+    client = createClient(createConfig({ baseUrl: "http://localhost:8000" }));
+    installAuthOnClient(client);
+  }
+});
+
+// src/_api/generated/sdk.gen.ts
+var sdk_gen_exports = {};
+__export(sdk_gen_exports, {
+  CfgAccounts: () => CfgAccounts,
+  CfgAccountsApiKey: () => CfgAccountsApiKey,
+  CfgAccountsAuth: () => CfgAccountsAuth,
+  CfgAccountsOauth: () => CfgAccountsOauth,
+  CfgAccountsProfile: () => CfgAccountsProfile,
+  CfgCentrifugo: () => CfgCentrifugo,
+  CfgTotp: () => CfgTotp,
+  CfgTotpBackupCodes: () => CfgTotpBackupCodes,
+  CfgTotpSetup: () => CfgTotpSetup,
+  CfgTotpVerify: () => CfgTotpVerify
+});
+var CfgAccountsApiKey, CfgAccountsOauth, CfgAccounts, CfgAccountsProfile, CfgAccountsAuth, CfgCentrifugo, CfgTotpBackupCodes, CfgTotp, CfgTotpSetup, CfgTotpVerify;
+var init_sdk_gen = __esm({
+  "src/_api/generated/sdk.gen.ts"() {
+    init_client();
+    init_client_gen2();
+    CfgAccountsApiKey = class {
+      static {
+        __name(this, "CfgAccountsApiKey");
       }
-      const textError = await response.text();
-      let jsonError;
-      try {
-        jsonError = JSON.parse(textError);
-      } catch {
+      /**
+       * Get API key details
+       *
+       * Retrieve the current user's API key (masked) and metadata.
+       */
+      static cfgAccountsApiKeyRetrieve(options) {
+        return (options?.client ?? client).get({
+          security: [
+            { scheme: "bearer", type: "http" },
+            {
+              in: "cookie",
+              name: "sessionid",
+              type: "apiKey"
+            },
+            { name: "X-API-Key", type: "apiKey" }
+          ],
+          url: "/cfg/accounts/api-key/",
+          ...options
+        });
       }
-      throw jsonError ?? textError;
-    } catch (error) {
-      let finalError = error;
-      for (const fn of interceptors.error.fns) {
-        if (fn) {
-          finalError = await fn(finalError, response, request2, options);
-        }
+      /**
+       * Regenerate API key
+       *
+       * Generate a new API key. The full key is returned only once.
+       */
+      static cfgAccountsApiKeyRegenerateCreate(options) {
+        return (options.client ?? client).post({
+          security: [
+            { scheme: "bearer", type: "http" },
+            {
+              in: "cookie",
+              name: "sessionid",
+              type: "apiKey"
+            },
+            { name: "X-API-Key", type: "apiKey" }
+          ],
+          url: "/cfg/accounts/api-key/regenerate/",
+          ...options,
+          headers: {
+            "Content-Type": "application/json",
+            ...options.headers
+          }
+        });
+      }
+      /**
+       * Reveal API key
+       *
+       * Return the current full API key WITHOUT rotating it. The same durable value every one of the user's agents uses — for the signed-in user to copy and paste into agent onboarding. Default GET stays masked; this is the explicit reveal action.
+       */
+      static cfgAccountsApiKeyRevealCreate(options) {
+        return (options.client ?? client).post({
+          security: [
+            { scheme: "bearer", type: "http" },
+            {
+              in: "cookie",
+              name: "sessionid",
+              type: "apiKey"
+            },
+            { name: "X-API-Key", type: "apiKey" }
+          ],
+          url: "/cfg/accounts/api-key/reveal/",
+          ...options,
+          headers: {
+            "Content-Type": "application/json",
+            ...options.headers
+          }
+        });
+      }
+      /**
+       * Test API key
+       *
+       * Test whether an API key is valid without consuming it.
+       */
+      static cfgAccountsApiKeyTestCreate(options) {
+        return (options.client ?? client).post({
+          security: [
+            { scheme: "bearer", type: "http" },
+            {
+              in: "cookie",
+              name: "sessionid",
+              type: "apiKey"
+            },
+            { name: "X-API-Key", type: "apiKey" }
+          ],
+          url: "/cfg/accounts/api-key/test/",
+          ...options,
+          headers: {
+            "Content-Type": "application/json",
+            ...options.headers
+          }
+        });
+      }
+    };
+    CfgAccountsOauth = class {
+      static {
+        __name(this, "CfgAccountsOauth");
+      }
+      /**
+       * List OAuth connections
+       *
+       * Get all OAuth connections for the current user.
+       */
+      static cfgAccountsOauthConnectionsList(options) {
+        return (options?.client ?? client).get({
+          security: [
+            { name: "X-API-Key", type: "apiKey" },
+            { scheme: "bearer", type: "http" },
+            { name: "Authorization", type: "apiKey" }
+          ],
+          url: "/cfg/accounts/oauth/connections/",
+          ...options
+        });
+      }
+      /**
+       * Disconnect OAuth provider
+       *
+       * Remove OAuth connection for the specified provider.
+       */
+      static cfgAccountsOauthDisconnectCreate(options) {
+        return (options.client ?? client).post({
+          security: [
+            { name: "X-API-Key", type: "apiKey" },
+            { scheme: "bearer", type: "http" },
+            { name: "Authorization", type: "apiKey" }
+          ],
+          url: "/cfg/accounts/oauth/disconnect/",
+          ...options,
+          headers: {
+            "Content-Type": "application/json",
+            ...options.headers
+          }
+        });
+      }
+      /**
+       * Start GitHub OAuth
+       *
+       * Generate GitHub OAuth authorization URL. Redirect user to this URL to start authentication.
+       */
+      static cfgAccountsOauthGithubAuthorizeCreate(options) {
+        return (options?.client ?? client).post({
+          url: "/cfg/accounts/oauth/github/authorize/",
+          ...options,
+          headers: {
+            "Content-Type": "application/json",
+            ...options?.headers
+          }
+        });
+      }
+      /**
+       * Complete GitHub OAuth
+       *
+       * Exchange authorization code for JWT tokens. Call this after GitHub redirects back with code.
+       */
+      static cfgAccountsOauthGithubCallbackCreate(options) {
+        return (options.client ?? client).post({
+          url: "/cfg/accounts/oauth/github/callback/",
+          ...options,
+          headers: {
+            "Content-Type": "application/json",
+            ...options.headers
+          }
+        });
+      }
+      /**
+       * List OAuth providers
+       *
+       * Get list of available OAuth providers for authentication.
+       */
+      static cfgAccountsOauthProvidersRetrieve(options) {
+        return (options?.client ?? client).get({ url: "/cfg/accounts/oauth/providers/", ...options });
+      }
+    };
+    CfgAccounts = class {
+      static {
+        __name(this, "CfgAccounts");
+      }
+      /**
+       * Request OTP code to email.
+       */
+      static cfgAccountsOtpRequestCreate(options) {
+        return (options.client ?? client).post({
+          security: [
+            { name: "X-API-Key", type: "apiKey" },
+            { scheme: "bearer", type: "http" },
+            { name: "Authorization", type: "apiKey" }
+          ],
+          url: "/cfg/accounts/otp/request/",
+          ...options,
+          headers: {
+            "Content-Type": "application/json",
+            ...options.headers
+          }
+        });
+      }
+      /**
+       * Verify OTP code and return JWT tokens or 2FA session.
+       *
+       * If user has 2FA enabled:
+       * - Returns requires_2fa=True with session_id
+       * - Client must complete 2FA verification at /cfg/totp/verify/
+       *
+       * If user has no 2FA:
+       * - Returns JWT tokens and user data directly
+       */
+      static cfgAccountsOtpVerifyCreate(options) {
+        return (options.client ?? client).post({
+          security: [
+            { name: "X-API-Key", type: "apiKey" },
+            { scheme: "bearer", type: "http" },
+            { name: "Authorization", type: "apiKey" }
+          ],
+          url: "/cfg/accounts/otp/verify/",
+          ...options,
+          headers: {
+            "Content-Type": "application/json",
+            ...options.headers
+          }
+        });
+      }
+    };
+    CfgAccountsProfile = class {
+      static {
+        __name(this, "CfgAccountsProfile");
+      }
+      /**
+       * Get current user profile
+       *
+       * Retrieve the current authenticated user's profile information.
+       */
+      static cfgAccountsProfileRetrieve(options) {
+        return (options?.client ?? client).get({
+          security: [{ scheme: "bearer", type: "http" }, {
+            in: "cookie",
+            name: "sessionid",
+            type: "apiKey"
+          }],
+          url: "/cfg/accounts/profile/",
+          ...options
+        });
+      }
+      /**
+       * Upload user avatar
+       *
+       * Upload avatar image for the current authenticated user. Accepts multipart/form-data with 'avatar' field.
+       */
+      static cfgAccountsProfileAvatarCreate(options) {
+        return (options?.client ?? client).post({
+          ...formDataBodySerializer,
+          security: [
+            { name: "X-API-Key", type: "apiKey" },
+            { scheme: "bearer", type: "http" },
+            { name: "Authorization", type: "apiKey" }
+          ],
+          url: "/cfg/accounts/profile/avatar/",
+          ...options,
+          headers: {
+            "Content-Type": null,
+            ...options?.headers
+          }
+        });
+      }
+      /**
+       * Delete user account
+       *
+       *
+       * Permanently delete the current user's account.
+       *
+       * This operation:
+       * - Deactivates the account (user cannot log in)
+       * - Anonymizes personal data (GDPR compliance)
+       * - Frees up the email address for re-registration
+       * - Preserves audit trail
+       *
+       * The account can be restored by an administrator if needed.
+       *
+       */
+      static cfgAccountsProfileDeleteCreate(options) {
+        return (options?.client ?? client).post({
+          security: [{ scheme: "bearer", type: "http" }, {
+            in: "cookie",
+            name: "sessionid",
+            type: "apiKey"
+          }],
+          url: "/cfg/accounts/profile/delete/",
+          ...options
+        });
+      }
+      /**
+       * Partial update user profile
+       *
+       * Partially update the current authenticated user's profile information. Supports avatar upload.
+       */
+      static cfgAccountsProfilePartialPartialUpdate(options) {
+        return (options?.client ?? client).patch({
+          security: [{ scheme: "bearer", type: "http" }, {
+            in: "cookie",
+            name: "sessionid",
+            type: "apiKey"
+          }],
+          url: "/cfg/accounts/profile/partial/",
+          ...options,
+          headers: {
+            "Content-Type": "application/json",
+            ...options?.headers
+          }
+        });
+      }
+      /**
+       * Partial update user profile
+       *
+       * Partially update the current authenticated user's profile information. Supports avatar upload.
+       */
+      static cfgAccountsProfilePartialUpdate(options) {
+        return (options?.client ?? client).put({
+          security: [{ scheme: "bearer", type: "http" }, {
+            in: "cookie",
+            name: "sessionid",
+            type: "apiKey"
+          }],
+          url: "/cfg/accounts/profile/partial/",
+          ...options,
+          headers: {
+            "Content-Type": "application/json",
+            ...options?.headers
+          }
+        });
+      }
+      /**
+       * Update user profile
+       *
+       * Update the current authenticated user's profile information.
+       */
+      static cfgAccountsProfileUpdatePartialUpdate(options) {
+        return (options?.client ?? client).patch({
+          security: [{ scheme: "bearer", type: "http" }, {
+            in: "cookie",
+            name: "sessionid",
+            type: "apiKey"
+          }],
+          url: "/cfg/accounts/profile/update/",
+          ...options,
+          headers: {
+            "Content-Type": "application/json",
+            ...options?.headers
+          }
+        });
+      }
+      /**
+       * Update user profile
+       *
+       * Update the current authenticated user's profile information.
+       */
+      static cfgAccountsProfileUpdateUpdate(options) {
+        return (options?.client ?? client).put({
+          security: [{ scheme: "bearer", type: "http" }, {
+            in: "cookie",
+            name: "sessionid",
+            type: "apiKey"
+          }],
+          url: "/cfg/accounts/profile/update/",
+          ...options,
+          headers: {
+            "Content-Type": "application/json",
+            ...options?.headers
+          }
+        });
+      }
+    };
+    CfgAccountsAuth = class {
+      static {
+        __name(this, "CfgAccountsAuth");
+      }
+      /**
+       * Revoke a refresh token (logout).
+       *
+       * Blacklists the posted refresh token so it can never mint another access
+       * token. Called best-effort by the client's logout — without it, "logout"
+       * is purely client-side and a stolen refresh token survives until expiry.
+       */
+      static cfgAccountsTokenBlacklistCreate(options) {
+        return (options.client ?? client).post({
+          url: "/cfg/accounts/token/blacklist/",
+          ...options,
+          headers: {
+            "Content-Type": "application/json",
+            ...options.headers
+          }
+        });
+      }
+      /**
+       * Refresh JWT token.
+       *
+       * DPoP-aware: when the incoming refresh token is key-bound (`cnf.jkt`), the
+       * rotated access/refresh in the response are re-stamped with the same `cnf`
+       * (stock SimpleJWT drops it from the derived access), and a matching DPoP
+       * proof is required on the refresh request — so a stolen refresh token can't
+       * be used to mint fresh tokens.
+       */
+      static cfgAccountsTokenRefreshCreate(options) {
+        return (options.client ?? client).post({
+          url: "/cfg/accounts/token/refresh/",
+          ...options,
+          headers: {
+            "Content-Type": "application/json",
+            ...options.headers
+          }
+        });
+      }
+    };
+    CfgCentrifugo = class {
+      static {
+        __name(this, "CfgCentrifugo");
+      }
+      /**
+       * Get Centrifugo connection token
+       *
+       * Generate JWT token for WebSocket connection to Centrifugo. Token includes user's allowed channels based on their permissions. Requires authentication.
+       */
+      static cfgCentrifugoAuthTokenRetrieve(options) {
+        return (options?.client ?? client).get({
+          security: [
+            { name: "X-API-Key", type: "apiKey" },
+            { scheme: "bearer", type: "http" },
+            { name: "Authorization", type: "apiKey" }
+          ],
+          url: "/cfg/centrifugo/auth/token/",
+          ...options
+        });
+      }
+    };
+    CfgTotpBackupCodes = class {
+      static {
+        __name(this, "CfgTotpBackupCodes");
+      }
+      /**
+       * Get backup codes status for user.
+       */
+      static cfgTotpBackupCodesRetrieve(options) {
+        return (options?.client ?? client).get({
+          security: [
+            { name: "X-API-Key", type: "apiKey" },
+            { scheme: "bearer", type: "http" },
+            { name: "Authorization", type: "apiKey" }
+          ],
+          url: "/cfg/totp/backup-codes/",
+          ...options
+        });
+      }
+      /**
+       * Regenerate backup codes.
+       *
+       * Requires TOTP code for verification.
+       * Invalidates all existing codes.
+       */
+      static cfgTotpBackupCodesRegenerateCreate(options) {
+        return (options.client ?? client).post({
+          security: [
+            { name: "X-API-Key", type: "apiKey" },
+            { scheme: "bearer", type: "http" },
+            { name: "Authorization", type: "apiKey" }
+          ],
+          url: "/cfg/totp/backup-codes/regenerate/",
+          ...options,
+          headers: {
+            "Content-Type": "application/json",
+            ...options.headers
+          }
+        });
+      }
+    };
+    CfgTotp = class {
+      static {
+        __name(this, "CfgTotp");
+      }
+      /**
+       * List all TOTP devices for user.
+       */
+      static cfgTotpDevicesRetrieve(options) {
+        return (options?.client ?? client).get({
+          security: [
+            { name: "X-API-Key", type: "apiKey" },
+            { scheme: "bearer", type: "http" },
+            { name: "Authorization", type: "apiKey" }
+          ],
+          url: "/cfg/totp/devices/",
+          ...options
+        });
       }
-      finalError = finalError || {};
-      if (throwOnError) {
-        throw finalError;
+      /**
+       * Delete a TOTP device.
+       *
+       * Requires verification code if removing the last/primary device.
+       */
+      static cfgTotpDevicesDestroy(options) {
+        return (options.client ?? client).delete({
+          security: [
+            { name: "X-API-Key", type: "apiKey" },
+            { scheme: "bearer", type: "http" },
+            { name: "Authorization", type: "apiKey" }
+          ],
+          url: "/cfg/totp/devices/{id}/",
+          ...options
+        });
+      }
+      /**
+       * Completely disable 2FA for account.
+       *
+       * Requires verification code.
+       */
+      static cfgTotpDisableCreate(options) {
+        return (options.client ?? client).post({
+          security: [
+            { name: "X-API-Key", type: "apiKey" },
+            { scheme: "bearer", type: "http" },
+            { name: "Authorization", type: "apiKey" }
+          ],
+          url: "/cfg/totp/disable/",
+          ...options,
+          headers: {
+            "Content-Type": "application/json",
+            ...options.headers
+          }
+        });
+      }
+    };
+    CfgTotpSetup = class {
+      static {
+        __name(this, "CfgTotpSetup");
+      }
+      /**
+       * Start 2FA setup process.
+       *
+       * Creates a new TOTP device and returns QR code for scanning.
+       */
+      static cfgTotpSetupCreate(options) {
+        return (options?.client ?? client).post({
+          security: [
+            { name: "X-API-Key", type: "apiKey" },
+            { scheme: "bearer", type: "http" },
+            { name: "Authorization", type: "apiKey" }
+          ],
+          url: "/cfg/totp/setup/",
+          ...options,
+          headers: {
+            "Content-Type": "application/json",
+            ...options?.headers
+          }
+        });
       }
-      return responseStyle === "data" ? void 0 : {
-        error: finalError,
-        request: request2,
-        response
-      };
-    }
-  }, "request");
-  const makeMethodFn = /* @__PURE__ */ __name((method) => (options) => request({ ...options, method }), "makeMethodFn");
-  const makeSseFn = /* @__PURE__ */ __name((method) => async (options) => {
-    const { opts, url } = await beforeRequest(options);
-    return createSseClient({
-      ...opts,
-      body: opts.body,
-      method,
-      onRequest: /* @__PURE__ */ __name(async (url2, init) => {
-        let request2 = new Request(url2, init);
-        for (const fn of interceptors.request.fns) {
-          if (fn) {
-            request2 = await fn(request2, opts);
+      /**
+       * Confirm 2FA setup with first valid code.
+       *
+       * Activates the device and generates backup codes.
+       */
+      static cfgTotpSetupConfirmCreate(options) {
+        return (options.client ?? client).post({
+          security: [
+            { name: "X-API-Key", type: "apiKey" },
+            { scheme: "bearer", type: "http" },
+            { name: "Authorization", type: "apiKey" }
+          ],
+          url: "/cfg/totp/setup/confirm/",
+          ...options,
+          headers: {
+            "Content-Type": "application/json",
+            ...options.headers
           }
-        }
-        return request2;
-      }, "onRequest"),
-      serializedBody: getValidRequestBody(opts),
-      url
-    });
-  }, "makeSseFn");
-  const _buildUrl = /* @__PURE__ */ __name((options) => buildUrl({ ..._config, ...options }), "_buildUrl");
-  return {
-    buildUrl: _buildUrl,
-    connect: makeMethodFn("CONNECT"),
-    delete: makeMethodFn("DELETE"),
-    get: makeMethodFn("GET"),
-    getConfig,
-    head: makeMethodFn("HEAD"),
-    interceptors,
-    options: makeMethodFn("OPTIONS"),
-    patch: makeMethodFn("PATCH"),
-    post: makeMethodFn("POST"),
-    put: makeMethodFn("PUT"),
-    request,
-    setConfig,
-    sse: {
-      connect: makeSseFn("CONNECT"),
-      delete: makeSseFn("DELETE"),
-      get: makeSseFn("GET"),
-      head: makeSseFn("HEAD"),
-      options: makeSseFn("OPTIONS"),
-      patch: makeSseFn("PATCH"),
-      post: makeSseFn("POST"),
-      put: makeSseFn("PUT"),
-      trace: makeSseFn("TRACE")
-    },
-    trace: makeMethodFn("TRACE")
-  };
-}, "createClient");
-
-// src/_api/generated/client.gen.ts
-var client = createClient(createConfig({ baseUrl: "http://localhost:8000" }));
-installAuthOnClient(client);
-
-// src/_api/generated/sdk.gen.ts
-var CfgAccountsApiKey = class {
-  static {
-    __name(this, "CfgAccountsApiKey");
-  }
-  /**
-   * Get API key details
-   *
-   * Retrieve the current user's API key (masked) and metadata.
-   */
-  static cfgAccountsApiKeyRetrieve(options) {
-    return (options?.client ?? client).get({
-      security: [
-        { scheme: "bearer", type: "http" },
-        {
-          in: "cookie",
-          name: "sessionid",
-          type: "apiKey"
-        },
-        { name: "X-API-Key", type: "apiKey" }
-      ],
-      url: "/cfg/accounts/api-key/",
-      ...options
-    });
-  }
-  /**
-   * Regenerate API key
-   *
-   * Generate a new API key. The full key is returned only once.
-   */
-  static cfgAccountsApiKeyRegenerateCreate(options) {
-    return (options.client ?? client).post({
-      security: [
-        { scheme: "bearer", type: "http" },
-        {
-          in: "cookie",
-          name: "sessionid",
-          type: "apiKey"
-        },
-        { name: "X-API-Key", type: "apiKey" }
-      ],
-      url: "/cfg/accounts/api-key/regenerate/",
-      ...options,
-      headers: {
-        "Content-Type": "application/json",
-        ...options.headers
+        });
       }
-    });
-  }
-  /**
-   * Reveal API key
-   *
-   * Return the current full API key WITHOUT rotating it. The same durable value every one of the user's agents uses — for the signed-in user to copy and paste into agent onboarding. Default GET stays masked; this is the explicit reveal action.
-   */
-  static cfgAccountsApiKeyRevealCreate(options) {
-    return (options.client ?? client).post({
-      security: [
-        { scheme: "bearer", type: "http" },
-        {
-          in: "cookie",
-          name: "sessionid",
-          type: "apiKey"
-        },
-        { name: "X-API-Key", type: "apiKey" }
-      ],
-      url: "/cfg/accounts/api-key/reveal/",
-      ...options,
-      headers: {
-        "Content-Type": "application/json",
-        ...options.headers
+    };
+    CfgTotpVerify = class {
+      static {
+        __name(this, "CfgTotpVerify");
       }
-    });
-  }
-  /**
-   * Test API key
-   *
-   * Test whether an API key is valid without consuming it.
-   */
-  static cfgAccountsApiKeyTestCreate(options) {
-    return (options.client ?? client).post({
-      security: [
-        { scheme: "bearer", type: "http" },
-        {
-          in: "cookie",
-          name: "sessionid",
-          type: "apiKey"
-        },
-        { name: "X-API-Key", type: "apiKey" }
-      ],
-      url: "/cfg/accounts/api-key/test/",
-      ...options,
-      headers: {
-        "Content-Type": "application/json",
-        ...options.headers
+      /**
+       * Verify TOTP code for 2FA session.
+       *
+       * Completes authentication and returns JWT tokens on success.
+       */
+      static cfgTotpVerifyCreate(options) {
+        return (options.client ?? client).post({
+          security: [
+            { name: "X-API-Key", type: "apiKey" },
+            { scheme: "bearer", type: "http" },
+            { name: "Authorization", type: "apiKey" }
+          ],
+          url: "/cfg/totp/verify/",
+          ...options,
+          headers: {
+            "Content-Type": "application/json",
+            ...options.headers
+          }
+        });
       }
-    });
-  }
-};
-var CfgAccountsOauth = class {
-  static {
-    __name(this, "CfgAccountsOauth");
+      /**
+       * Verify backup recovery code for 2FA session.
+       *
+       * Alternative verification method when TOTP device unavailable.
+       */
+      static cfgTotpVerifyBackupCreate(options) {
+        return (options.client ?? client).post({
+          security: [
+            { name: "X-API-Key", type: "apiKey" },
+            { scheme: "bearer", type: "http" },
+            { name: "Authorization", type: "apiKey" }
+          ],
+          url: "/cfg/totp/verify/backup/",
+          ...options,
+          headers: {
+            "Content-Type": "application/json",
+            ...options.headers
+          }
+        });
+      }
+    };
   }
-  /**
-   * List OAuth connections
-   *
-   * Get all OAuth connections for the current user.
-   */
-  static cfgAccountsOauthConnectionsList(options) {
-    return (options?.client ?? client).get({
-      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
-      url: "/cfg/accounts/oauth/connections/",
-      ...options
-    });
+});
+
+// src/_api/generated/helpers/auth.ts
+function detectLocale() {
+  try {
+    if (typeof document !== "undefined") {
+      const m = document.cookie.match(/(?:^|;\s*)NEXT_LOCALE=([^;]*)/);
+      if (m) return decodeURIComponent(m[1]);
+    }
+    if (typeof navigator !== "undefined" && navigator.language) {
+      return navigator.language;
+    }
+  } catch {
   }
-  /**
-   * Disconnect OAuth provider
-   *
-   * Remove OAuth connection for the specified provider.
-   */
-  static cfgAccountsOauthDisconnectCreate(options) {
-    return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
-      url: "/cfg/accounts/oauth/disconnect/",
-      ...options,
-      headers: {
-        "Content-Type": "application/json",
-        ...options.headers
+  return null;
+}
+function defaultBaseUrl() {
+  if (typeof window !== "undefined") {
+    try {
+      if (typeof process !== "undefined" && process.env) {
+        if (process.env.NEXT_PUBLIC_STATIC_BUILD === "true") return "";
+        if (process.env.NEXT_PUBLIC_API_PROXY_URL !== void 0)
+          return process.env.NEXT_PUBLIC_API_PROXY_URL;
+        return process.env.NEXT_PUBLIC_API_URL || "";
       }
-    });
+    } catch {
+    }
+    return "";
   }
-  /**
-   * Start GitHub OAuth
-   *
-   * Generate GitHub OAuth authorization URL. Redirect user to this URL to start authentication.
-   */
-  static cfgAccountsOauthGithubAuthorizeCreate(options) {
-    return (options?.client ?? client).post({
-      url: "/cfg/accounts/oauth/github/authorize/",
-      ...options,
-      headers: {
-        "Content-Type": "application/json",
-        ...options?.headers
-      }
-    });
+  try {
+    if (typeof process !== "undefined" && process.env) {
+      if (process.env.NEXT_PUBLIC_STATIC_BUILD === "true") return "";
+      return process.env.NEXT_PUBLIC_API_URL || "";
+    }
+  } catch {
   }
-  /**
-   * Complete GitHub OAuth
-   *
-   * Exchange authorization code for JWT tokens. Call this after GitHub redirects back with code.
-   */
-  static cfgAccountsOauthGithubCallbackCreate(options) {
-    return (options.client ?? client).post({
-      url: "/cfg/accounts/oauth/github/callback/",
-      ...options,
-      headers: {
-        "Content-Type": "application/json",
-        ...options.headers
-      }
-    });
+  return "";
+}
+function defaultApiKey() {
+  try {
+    if (typeof process !== "undefined" && process.env?.NEXT_PUBLIC_API_KEY) {
+      return process.env.NEXT_PUBLIC_API_KEY;
+    }
+  } catch {
   }
-  /**
-   * List OAuth providers
-   *
-   * Get list of available OAuth providers for authentication.
-   */
-  static cfgAccountsOauthProvidersRetrieve(options) {
-    return (options?.client ?? client).get({ url: "/cfg/accounts/oauth/providers/", ...options });
+  return null;
+}
+function jwtExpMs(token) {
+  try {
+    const payload = token.split(".")[1];
+    if (!payload) return null;
+    const json = JSON.parse(atob(payload.replace(/-/g, "+").replace(/_/g, "/")));
+    return typeof json.exp === "number" ? json.exp * 1e3 : null;
+  } catch {
+    return null;
   }
-};
-var CfgAccounts = class {
-  static {
-    __name(this, "CfgAccounts");
+}
+function computeSnapshot() {
+  const access = _storage.get(ACCESS_KEY);
+  const refresh = _storage.get(REFRESH_KEY);
+  const now = Date.now();
+  const accessExp = access ? jwtExpMs(access) : null;
+  const accessAlive = access !== null && (accessExp === null || accessExp > now);
+  const refreshExp = refresh ? jwtExpMs(refresh) : null;
+  const refreshAlive = refresh !== null && (refreshExp === null || refreshExp > now);
+  return {
+    status: accessAlive || refreshAlive ? "authenticated" : "anonymous",
+    accessExpiresAt: accessExp
+  };
+}
+function scheduleExpiryFlip() {
+  if (!isBrowser) return;
+  if (_expiryTimer !== null) {
+    clearTimeout(_expiryTimer);
+    _expiryTimer = null;
+  }
+  if (_sessionListeners.size === 0) return;
+  const now = Date.now();
+  const exps = [];
+  const access = _storage.get(ACCESS_KEY);
+  const refresh = _storage.get(REFRESH_KEY);
+  const accessExp = access ? jwtExpMs(access) : null;
+  const refreshExp = refresh ? jwtExpMs(refresh) : null;
+  if (accessExp !== null && accessExp > now) exps.push(accessExp);
+  if (refreshExp !== null && refreshExp > now) exps.push(refreshExp);
+  if (!exps.length) return;
+  const delay = Math.min(Math.min(...exps) - now + 250, 2147483647);
+  _expiryTimer = setTimeout(notifySessionChanged, delay);
+}
+function notifySessionChanged() {
+  const next = computeSnapshot();
+  const changed = next.status !== _snapshot.status || next.accessExpiresAt !== _snapshot.accessExpiresAt;
+  if (changed) _snapshot = next;
+  scheduleExpiryFlip();
+  if (!changed) return;
+  for (const listener of Array.from(_sessionListeners)) {
+    try {
+      listener();
+    } catch {
+    }
   }
-  /**
-   * Request OTP code to email.
-   */
-  static cfgAccountsOtpRequestCreate(options) {
-    return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
-      url: "/cfg/accounts/otp/request/",
-      ...options,
-      headers: {
-        "Content-Type": "application/json",
-        ...options.headers
-      }
-    });
+  if (isBrowser) {
+    try {
+      window.dispatchEvent(new Event(SESSION_SYNC_EVENT));
+    } catch {
+    }
   }
-  /**
-   * Verify OTP code and return JWT tokens or 2FA session.
-   *
-   * If user has 2FA enabled:
-   * - Returns requires_2fa=True with session_id
-   * - Client must complete 2FA verification at /cfg/totp/verify/
-   *
-   * If user has no 2FA:
-   * - Returns JWT tokens and user data directly
-   */
-  static cfgAccountsOtpVerifyCreate(options) {
-    return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
-      url: "/cfg/accounts/otp/verify/",
-      ...options,
-      headers: {
-        "Content-Type": "application/json",
-        ...options.headers
+}
+function ensureStorageSync() {
+  if (!isBrowser || _storageListenerInstalled) return;
+  _storageListenerInstalled = true;
+  window.addEventListener("storage", (e) => {
+    if (e.key === null || e.key === ACCESS_KEY || e.key === REFRESH_KEY) {
+      notifySessionChanged();
+    }
+  });
+  window.addEventListener(SESSION_SYNC_EVENT, () => notifySessionChanged());
+}
+function pushClientConfig() {
+  if (!_client) return;
+  _client.setConfig({
+    baseUrl: auth.getBaseUrl(),
+    credentials: _withCredentials ? "include" : "same-origin"
+  });
+}
+async function tryRefresh() {
+  if (_refreshInflight) return _refreshInflight;
+  if (!_refreshHandler) return null;
+  const runRefresh = /* @__PURE__ */ __name(async () => {
+    const refresh = auth.getRefreshToken();
+    if (!refresh) return null;
+    const result = await _refreshHandler(refresh);
+    if (!result?.access) return null;
+    auth.setToken(result.access);
+    if (result.refresh) auth.setRefreshToken(result.refresh);
+    return result.access;
+  }, "runRefresh");
+  _refreshInflight = (async () => {
+    try {
+      const locks = typeof navigator !== "undefined" ? navigator.locks : void 0;
+      if (locks?.request) {
+        return await locks.request(`${REFRESH_KEY}:refresh`, runRefresh);
       }
-    });
-  }
-};
-var CfgAccountsProfile = class {
-  static {
-    __name(this, "CfgAccountsProfile");
+      return await runRefresh();
+    } catch {
+      return null;
+    } finally {
+      _refreshInflight = null;
+    }
+  })();
+  return _refreshInflight;
+}
+function expireSession(response) {
+  auth.clearTokens();
+  for (const cb of Array.from(_sessionExpiredHandlers)) {
+    try {
+      cb(response);
+    } catch {
+    }
   }
-  /**
-   * Get current user profile
-   *
-   * Retrieve the current authenticated user's profile information.
-   */
-  static cfgAccountsProfileRetrieve(options) {
-    return (options?.client ?? client).get({
-      security: [{ scheme: "bearer", type: "http" }, {
-        in: "cookie",
-        name: "sessionid",
-        type: "apiKey"
-      }],
-      url: "/cfg/accounts/profile/",
-      ...options
-    });
+  if (_onUnauthorized) {
+    try {
+      _onUnauthorized(response);
+    } catch {
+    }
   }
-  /**
-   * Upload user avatar
-   *
-   * Upload avatar image for the current authenticated user. Accepts multipart/form-data with 'avatar' field.
-   */
-  static cfgAccountsProfileAvatarCreate(options) {
-    return (options?.client ?? client).post({
-      ...formDataBodySerializer,
-      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
-      url: "/cfg/accounts/profile/avatar/",
-      ...options,
-      headers: {
-        "Content-Type": null,
-        ...options?.headers
-      }
-    });
+}
+function dpopEnabled() {
+  try {
+    return typeof process !== "undefined" && process.env?.NEXT_PUBLIC_DPOP_ENABLED === "true";
+  } catch {
+    return false;
   }
-  /**
-   * Delete user account
-   *
-   *
-   * Permanently delete the current user's account.
-   *
-   * This operation:
-   * - Deactivates the account (user cannot log in)
-   * - Anonymizes personal data (GDPR compliance)
-   * - Frees up the email address for re-registration
-   * - Preserves audit trail
-   *
-   * The account can be restored by an administrator if needed.
-   *
-   */
-  static cfgAccountsProfileDeleteCreate(options) {
-    return (options?.client ?? client).post({
-      security: [{ scheme: "bearer", type: "http" }, {
-        in: "cookie",
-        name: "sessionid",
-        type: "apiKey"
-      }],
-      url: "/cfg/accounts/profile/delete/",
-      ...options
+}
+function _idbOpen() {
+  return new Promise((resolve, reject) => {
+    const req = indexedDB.open(_DPOP_DB, 1);
+    req.onupgradeneeded = () => req.result.createObjectStore(_DPOP_STORE);
+    req.onsuccess = () => resolve(req.result);
+    req.onerror = () => reject(req.error);
+  });
+}
+function _idbGet(key) {
+  return _idbOpen().then((db) => new Promise((resolve, reject) => {
+    const tx = db.transaction(_DPOP_STORE, "readonly");
+    const req = tx.objectStore(_DPOP_STORE).get(key);
+    req.onsuccess = () => resolve(req.result);
+    req.onerror = () => reject(req.error);
+  }));
+}
+function _idbPut(key, value) {
+  return _idbOpen().then((db) => new Promise((resolve, reject) => {
+    const tx = db.transaction(_DPOP_STORE, "readwrite");
+    tx.objectStore(_DPOP_STORE).put(value, key);
+    tx.oncomplete = () => resolve();
+    tx.onerror = () => reject(tx.error);
+  }));
+}
+function _getDpopKeyPair() {
+  if (_dpopKeyPromise) return _dpopKeyPromise;
+  _dpopKeyPromise = (async () => {
+    const existing = await _idbGet(_DPOP_KEY_ID).catch(() => void 0);
+    if (existing) return existing;
+    const pair = await crypto.subtle.generateKey(
+      { name: "ECDSA", namedCurve: "P-256" },
+      false,
+      // extractable:false — JS can sign but never export the private key
+      ["sign"]
+    );
+    await _idbPut(_DPOP_KEY_ID, pair).catch(() => {
     });
+    return pair;
+  })();
+  return _dpopKeyPromise;
+}
+function _b64urlFromBytes(bytes) {
+  const arr = bytes instanceof Uint8Array ? bytes : new Uint8Array(bytes);
+  let s = "";
+  for (let i = 0; i < arr.length; i++) s += String.fromCharCode(arr[i]);
+  return btoa(s).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function _b64urlFromString(str) {
+  return _b64urlFromBytes(new TextEncoder().encode(str));
+}
+async function _publicJwk(pub) {
+  const jwk = await crypto.subtle.exportKey("jwk", pub);
+  return { kty: "EC", crv: "P-256", x: jwk.x, y: jwk.y };
+}
+async function _makeDpopProof(method, url) {
+  try {
+    const pair = await _getDpopKeyPair();
+    const jwk = await _publicJwk(pair.publicKey);
+    const header = { typ: "dpop+jwt", alg: "ES256", jwk };
+    const htu = url.split("#")[0].split("?")[0];
+    const jti = crypto.randomUUID && crypto.randomUUID() || _b64urlFromBytes(crypto.getRandomValues(new Uint8Array(16)));
+    const payload = { htm: method.toUpperCase(), htu, iat: Math.floor(Date.now() / 1e3), jti };
+    const signingInput = `${_b64urlFromString(JSON.stringify(header))}.${_b64urlFromString(JSON.stringify(payload))}`;
+    const sig = await crypto.subtle.sign(
+      { name: "ECDSA", hash: "SHA-256" },
+      pair.privateKey,
+      new TextEncoder().encode(signingInput)
+    );
+    return `${signingInput}.${_b64urlFromBytes(sig)}`;
+  } catch {
+    return null;
   }
-  /**
-   * Partial update user profile
-   *
-   * Partially update the current authenticated user's profile information. Supports avatar upload.
-   */
-  static cfgAccountsProfilePartialPartialUpdate(options) {
-    return (options?.client ?? client).patch({
-      security: [{ scheme: "bearer", type: "http" }, {
-        in: "cookie",
-        name: "sessionid",
-        type: "apiKey"
-      }],
-      url: "/cfg/accounts/profile/partial/",
-      ...options,
-      headers: {
-        "Content-Type": "application/json",
-        ...options?.headers
+}
+function installAuthOnClient(client2) {
+  if (_client) return;
+  _client = client2;
+  client2.setConfig({
+    baseUrl: auth.getBaseUrl(),
+    credentials: _withCredentials ? "include" : "same-origin"
+  });
+  client2.interceptors.request.use(async (request) => {
+    const token = auth.getToken();
+    if (token) request.headers.set("Authorization", `Bearer ${token}`);
+    const locale = auth.getLocale();
+    if (locale) request.headers.set("Accept-Language", locale);
+    const apiKey = auth.getApiKey();
+    if (apiKey && !request.headers.has("X-API-Key")) request.headers.set("X-API-Key", apiKey);
+    try {
+      const tz = Intl.DateTimeFormat().resolvedOptions().timeZone;
+      if (tz) request.headers.set("X-Timezone", tz);
+    } catch {
+    }
+    request.headers.set("X-Client-Time", (/* @__PURE__ */ new Date()).toISOString());
+    if (dpopEnabled() && typeof window !== "undefined") {
+      const proof = await _makeDpopProof(request.method, request.url);
+      if (proof) request.headers.set("DPoP", proof);
+    }
+    return request;
+  });
+  client2.interceptors.error.use((err, res, req) => {
+    if (err instanceof APIError) return err;
+    const url = req?.url ?? "";
+    const status = res?.status ?? 0;
+    const statusText = res?.statusText ?? "";
+    return new APIError(status, statusText, err, url);
+  });
+  client2.interceptors.response.use(async (response, request) => {
+    if (response.status !== 401) return response;
+    if (request.headers.get(RETRY_MARKER)) {
+      expireSession(response);
+      return response;
+    }
+    const newToken = await tryRefresh();
+    if (!newToken) {
+      expireSession(response);
+      return response;
+    }
+    const retry = request.clone();
+    retry.headers.set("Authorization", `Bearer ${newToken}`);
+    retry.headers.set(RETRY_MARKER, "1");
+    if (dpopEnabled() && typeof window !== "undefined") {
+      const proof = await _makeDpopProof(retry.method, retry.url);
+      if (proof) retry.headers.set("DPoP", proof);
+    }
+    try {
+      const retried = await fetch(retry);
+      if (retried.status === 401) expireSession(retried);
+      return retried;
+    } catch {
+      return response;
+    }
+  });
+}
+var ACCESS_KEY, REFRESH_KEY, API_KEY_KEY, isBrowser, localStorageBackend, COOKIE_MAX_AGE, cookieBackend, _storage, _storageMode, _localeOverride, _apiKeyOverride, _baseUrlOverride, _withCredentials, _onUnauthorized, _refreshHandler, _refreshInflight, RETRY_MARKER, SERVER_SNAPSHOT, SESSION_SYNC_EVENT, _snapshot, _sessionListeners, _expiryTimer, _storageListenerInstalled, _sessionExpiredHandlers, _client, auth, _DPOP_DB, _DPOP_STORE, _DPOP_KEY_ID, _dpopKeyPromise;
+var init_auth = __esm({
+  "src/_api/generated/helpers/auth.ts"() {
+    init_errors();
+    ACCESS_KEY = "cfg.access_token";
+    REFRESH_KEY = "cfg.refresh_token";
+    API_KEY_KEY = "cfg.api_key";
+    isBrowser = typeof window !== "undefined";
+    localStorageBackend = {
+      get(key) {
+        if (!isBrowser) return null;
+        try {
+          return window.localStorage.getItem(key);
+        } catch {
+          return null;
+        }
+      },
+      set(key, value) {
+        if (!isBrowser) return;
+        try {
+          if (value === null) window.localStorage.removeItem(key);
+          else window.localStorage.setItem(key, value);
+        } catch {
+        }
       }
-    });
-  }
-  /**
-   * Partial update user profile
-   *
-   * Partially update the current authenticated user's profile information. Supports avatar upload.
-   */
-  static cfgAccountsProfilePartialUpdate(options) {
-    return (options?.client ?? client).put({
-      security: [{ scheme: "bearer", type: "http" }, {
-        in: "cookie",
-        name: "sessionid",
-        type: "apiKey"
-      }],
-      url: "/cfg/accounts/profile/partial/",
-      ...options,
-      headers: {
-        "Content-Type": "application/json",
-        ...options?.headers
+    };
+    COOKIE_MAX_AGE = 60 * 60 * 24 * 30;
+    cookieBackend = {
+      get(key) {
+        if (!isBrowser) return null;
+        try {
+          const re = new RegExp(`(?:^|;\\s*)${encodeURIComponent(key)}=([^;]*)`);
+          const m = document.cookie.match(re);
+          return m ? decodeURIComponent(m[1]) : null;
+        } catch {
+          return null;
+        }
+      },
+      set(key, value) {
+        if (!isBrowser) return;
+        try {
+          const k = encodeURIComponent(key);
+          const secure = window.location.protocol === "https:" ? "; Secure" : "";
+          if (value === null) {
+            document.cookie = `${k}=; Path=/; Max-Age=0; SameSite=Lax${secure}`;
+          } else {
+            const v = encodeURIComponent(value);
+            document.cookie = `${k}=${v}; Path=/; Max-Age=${COOKIE_MAX_AGE}; SameSite=Lax${secure}`;
+          }
+        } catch {
+        }
       }
-    });
-  }
-  /**
-   * Update user profile
-   *
-   * Update the current authenticated user's profile information.
-   */
-  static cfgAccountsProfileUpdatePartialUpdate(options) {
-    return (options?.client ?? client).patch({
-      security: [{ scheme: "bearer", type: "http" }, {
-        in: "cookie",
-        name: "sessionid",
-        type: "apiKey"
-      }],
-      url: "/cfg/accounts/profile/update/",
-      ...options,
-      headers: {
-        "Content-Type": "application/json",
-        ...options?.headers
+    };
+    _storage = localStorageBackend;
+    _storageMode = "localStorage";
+    __name(detectLocale, "detectLocale");
+    __name(defaultBaseUrl, "defaultBaseUrl");
+    __name(defaultApiKey, "defaultApiKey");
+    _localeOverride = null;
+    _apiKeyOverride = null;
+    _baseUrlOverride = null;
+    _withCredentials = true;
+    _onUnauthorized = null;
+    _refreshHandler = null;
+    _refreshInflight = null;
+    RETRY_MARKER = "X-Auth-Retry";
+    __name(jwtExpMs, "jwtExpMs");
+    __name(computeSnapshot, "computeSnapshot");
+    SERVER_SNAPSHOT = { status: "anonymous", accessExpiresAt: null };
+    SESSION_SYNC_EVENT = `cfg-auth:changed:${ACCESS_KEY}`;
+    _snapshot = computeSnapshot();
+    _sessionListeners = /* @__PURE__ */ new Set();
+    _expiryTimer = null;
+    _storageListenerInstalled = false;
+    __name(scheduleExpiryFlip, "scheduleExpiryFlip");
+    __name(notifySessionChanged, "notifySessionChanged");
+    __name(ensureStorageSync, "ensureStorageSync");
+    _sessionExpiredHandlers = /* @__PURE__ */ new Set();
+    _client = null;
+    __name(pushClientConfig, "pushClientConfig");
+    auth = {
+      // ── Storage mode ──────────────────────────────────────────────────
+      getStorageMode() {
+        return _storageMode;
+      },
+      setStorageMode(mode) {
+        _storageMode = mode;
+        _storage = mode === "cookie" ? cookieBackend : localStorageBackend;
+        notifySessionChanged();
+      },
+      // ── Bearer token ──────────────────────────────────────────────────
+      getToken() {
+        return _storage.get(ACCESS_KEY);
+      },
+      setToken(token) {
+        _storage.set(ACCESS_KEY, token);
+        notifySessionChanged();
+      },
+      getRefreshToken() {
+        return _storage.get(REFRESH_KEY);
+      },
+      setRefreshToken(token) {
+        _storage.set(REFRESH_KEY, token);
+        notifySessionChanged();
+      },
+      clearTokens() {
+        _storage.set(ACCESS_KEY, null);
+        _storage.set(REFRESH_KEY, null);
+        notifySessionChanged();
+      },
+      /** Session-aware: token PRESENT and not past its `exp` (or a live refresh
+       * token exists that can mint one). Prefer `getSnapshot().status` in React. */
+      isAuthenticated() {
+        return computeSnapshot().status === "authenticated";
+      },
+      // ── Session (the ONE write path for login/logout flows) ──────────
+      /**
+       * Persist a token pair atomically. Every login flow (OTP verify, 2FA,
+       * OAuth callback) and the refresh handler should end here — do NOT
+       * scatter `setToken`/`setRefreshToken` pairs through app code.
+       * `refresh: undefined` keeps the current refresh token (access-only
+       * rotation); `refresh: null` explicitly drops it.
+       */
+      setSession(tokens) {
+        _storage.set(ACCESS_KEY, tokens.access);
+        if (tokens.refresh !== void 0) _storage.set(REFRESH_KEY, tokens.refresh);
+        notifySessionChanged();
+      },
+      clearSession() {
+        auth.clearTokens();
+      },
+      // ── Reactive snapshot (for useSyncExternalStore) ──────────────────
+      /**
+       * @example React:
+       *   const session = useSyncExternalStore(
+       *     auth.subscribe, auth.getSnapshot, auth.getServerSnapshot,
+       *   );
+       *   const isAuthenticated = session.status === 'authenticated';
+       */
+      getSnapshot() {
+        return _snapshot;
+      },
+      getServerSnapshot() {
+        return SERVER_SNAPSHOT;
+      },
+      subscribe(listener) {
+        ensureStorageSync();
+        _sessionListeners.add(listener);
+        notifySessionChanged();
+        return () => {
+          _sessionListeners.delete(listener);
+          if (_sessionListeners.size === 0 && _expiryTimer !== null) {
+            clearTimeout(_expiryTimer);
+            _expiryTimer = null;
+          }
+        };
+      },
+      /**
+       * Fired on TERMINAL 401 — after the refresh+retry path is exhausted.
+       * The store has already cleared the session before calling back, so
+       * handlers only need to route to login (no clear-then-redirect
+       * ordering to get wrong). Returns an unsubscribe function; multiple
+       * handlers compose (unlike the legacy single-slot `onUnauthorized`).
+       */
+      onSessionExpired(cb) {
+        _sessionExpiredHandlers.add(cb);
+        return () => {
+          _sessionExpiredHandlers.delete(cb);
+        };
+      },
+      // ── API key ───────────────────────────────────────────────────────
+      getApiKey() {
+        return _apiKeyOverride ?? _storage.get(API_KEY_KEY) ?? defaultApiKey();
+      },
+      setApiKey(key) {
+        _apiKeyOverride = key;
+      },
+      setApiKeyPersist(key) {
+        _apiKeyOverride = key;
+        _storage.set(API_KEY_KEY, key);
+      },
+      clearApiKey() {
+        _apiKeyOverride = null;
+        _storage.set(API_KEY_KEY, null);
+      },
+      // ── Locale ────────────────────────────────────────────────────────
+      getLocale() {
+        return _localeOverride ?? detectLocale();
+      },
+      setLocale(locale) {
+        _localeOverride = locale;
+      },
+      // ── Base URL ──────────────────────────────────────────────────────
+      getBaseUrl() {
+        const url = _baseUrlOverride ?? defaultBaseUrl();
+        return url.replace(/\/$/, "");
+      },
+      setBaseUrl(url) {
+        _baseUrlOverride = url ? url.replace(/\/$/, "") : null;
+        pushClientConfig();
+      },
+      // ── Credentials toggle ────────────────────────────────────────────
+      getWithCredentials() {
+        return _withCredentials;
+      },
+      setWithCredentials(value) {
+        _withCredentials = value;
+        pushClientConfig();
+      },
+      // ── 401 handler ───────────────────────────────────────────────────
+      /**
+       * Fired when the server returns 401 AND no refresh path recovers it
+       * (no refresh token, no refresh handler, refresh failed, or retry
+       * still 401). The app should clear local state and redirect to login.
+       *
+       * NOT fired for 401 that gets transparently recovered by the refresh
+       * handler — those are invisible to callers.
+       */
+      onUnauthorized(cb) {
+        _onUnauthorized = cb;
+      },
+      /**
+       * Register the refresh strategy. The handler receives the current
+       * refresh token and must call your refresh endpoint, returning
+       * `{ access, refresh? }` on success or `null` on failure.
+       *
+       * @example
+       *   auth.setRefreshHandler(async (refresh) => {
+       *     const { data } = await Auth.tokenRefreshCreate({ body: { refresh } });
+       *     return data ? { access: data.access, refresh: data.refresh } : null;
+       *   });
+       */
+      setRefreshHandler(fn) {
+        _refreshHandler = fn;
+      },
+      /**
+       * Proactively run the registered refresh handler right now, reusing the
+       * SAME single-flight promise as the 401-recovery interceptor. Callers
+       * (e.g. an expiry timer / focus / reconnect) get token rotation,
+       * de-duplication and rotated-token persistence for free — they must NOT
+       * re-implement any of it. Returns the fresh access token, or null if
+       * there is no handler / no refresh token / the refresh failed.
+       */
+      refreshNow() {
+        return tryRefresh();
       }
-    });
-  }
-  /**
-   * Update user profile
-   *
-   * Update the current authenticated user's profile information.
-   */
-  static cfgAccountsProfileUpdateUpdate(options) {
-    return (options?.client ?? client).put({
-      security: [{ scheme: "bearer", type: "http" }, {
-        in: "cookie",
-        name: "sessionid",
-        type: "apiKey"
-      }],
-      url: "/cfg/accounts/profile/update/",
-      ...options,
-      headers: {
-        "Content-Type": "application/json",
-        ...options?.headers
+    };
+    __name(tryRefresh, "tryRefresh");
+    __name(expireSession, "expireSession");
+    __name(dpopEnabled, "dpopEnabled");
+    _DPOP_DB = "cfg-auth";
+    _DPOP_STORE = "keys";
+    _DPOP_KEY_ID = "dpop-ec-p256";
+    __name(_idbOpen, "_idbOpen");
+    __name(_idbGet, "_idbGet");
+    __name(_idbPut, "_idbPut");
+    _dpopKeyPromise = null;
+    __name(_getDpopKeyPair, "_getDpopKeyPair");
+    __name(_b64urlFromBytes, "_b64urlFromBytes");
+    __name(_b64urlFromString, "_b64urlFromString");
+    __name(_publicJwk, "_publicJwk");
+    __name(_makeDpopProof, "_makeDpopProof");
+    __name(installAuthOnClient, "installAuthOnClient");
+    auth.setRefreshHandler(async (refresh) => {
+      try {
+        const { CfgAccountsAuth: CfgAccountsAuth2 } = await Promise.resolve().then(() => (init_sdk_gen(), sdk_gen_exports));
+        const { data } = await CfgAccountsAuth2.cfgAccountsTokenRefreshCreate({
+          body: { refresh },
+          throwOnError: true
+        });
+        return data?.access ? { access: data.access, refresh: data.refresh ?? refresh } : null;
+      } catch {
+        return null;
       }
     });
   }
+});
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  APIError: () => APIError,
+  APILogger: () => APILogger,
+  CfgAccounts: () => CfgAccounts,
+  CfgAccountsAPI: () => API,
+  CfgAccountsApi: () => CfgAccountsApi,
+  CfgAccountsApiKey: () => CfgAccountsApiKey,
+  CfgAccountsAuth: () => CfgAccountsAuth,
+  CfgAccountsOauth: () => CfgAccountsOauth,
+  CfgAccountsProfile: () => CfgAccountsProfile,
+  CfgCentrifugo: () => CfgCentrifugo,
+  CfgCentrifugoAPI: () => API2,
+  CfgCentrifugoApi: () => CfgCentrifugoApi,
+  CfgTotp: () => CfgTotp,
+  CfgTotpAPI: () => API3,
+  CfgTotpApi: () => CfgTotpApi,
+  CfgTotpBackupCodes: () => CfgTotpBackupCodes,
+  CfgTotpSetup: () => CfgTotpSetup,
+  CfgTotpVerify: () => CfgTotpVerify,
+  CookieStorageAdapter: () => CookieStorageAdapter,
+  LocalStorageAdapter: () => LocalStorageAdapter,
+  MemoryStorageAdapter: () => MemoryStorageAdapter,
+  NetworkError: () => NetworkError,
+  api: () => CfgAccountsApi,
+  applyRoleLogPolicy: () => applyRoleLogPolicy,
+  auth: () => auth,
+  defaultLogger: () => defaultLogger,
+  dispatchValidationError: () => dispatchValidationError,
+  dpopEnabled: () => dpopEnabled2,
+  formatZodError: () => formatZodError,
+  getLogLevel: () => getLogLevel,
+  isBrowser: () => isBrowser2,
+  isDev: () => isDev,
+  isProd: () => isProd,
+  isStaticBuild: () => isStaticBuild,
+  onLogLevelChange: () => onLogLevelChange,
+  onValidationError: () => onValidationError,
+  setLogLevel: () => setLogLevel
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/_api/generated/index.ts
+init_auth();
+init_auth();
+
+// src/_api/generated/_cfg_accounts/api.ts
+init_auth();
+
+// src/_api/generated/helpers/logger.ts
+var import_consola = require("consola");
+var DEFAULT_CONFIG = {
+  enabled: typeof process !== "undefined" && process.env.NODE_ENV !== "production",
+  logRequests: true,
+  logResponses: true,
+  logErrors: true,
+  logBodies: true,
+  logHeaders: false
 };
-var CfgAccountsAuth = class {
+var SENSITIVE_HEADERS = [
+  "authorization",
+  "cookie",
+  "set-cookie",
+  "x-api-key",
+  "x-csrf-token"
+];
+var APILogger = class {
   static {
-    __name(this, "CfgAccountsAuth");
+    __name(this, "APILogger");
   }
-  /**
-   * Refresh JWT token.
-   *
-   * DPoP-aware: when the incoming refresh token is key-bound (`cnf.jkt`), the
-   * rotated access/refresh in the response are re-stamped with the same `cnf`
-   * (stock SimpleJWT drops it from the derived access), and a matching DPoP
-   * proof is required on the refresh request — so a stolen refresh token can't
-   * be used to mint fresh tokens.
-   */
-  static cfgAccountsTokenRefreshCreate(options) {
-    return (options.client ?? client).post({
-      url: "/cfg/accounts/token/refresh/",
-      ...options,
-      headers: {
-        "Content-Type": "application/json",
-        ...options.headers
-      }
+  config;
+  consola;
+  constructor(config = {}) {
+    this.config = { ...DEFAULT_CONFIG, ...config };
+    this.consola = config.consola || (0, import_consola.createConsola)({
+      level: this.config.enabled ? 4 : 0
     });
   }
-};
-var CfgCentrifugo = class {
-  static {
-    __name(this, "CfgCentrifugo");
-  }
-  /**
-   * Get Centrifugo connection token
-   *
-   * Generate JWT token for WebSocket connection to Centrifugo. Token includes user's allowed channels based on their permissions. Requires authentication.
-   */
-  static cfgCentrifugoAuthTokenRetrieve(options) {
-    return (options?.client ?? client).get({
-      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
-      url: "/cfg/centrifugo/auth/token/",
-      ...options
-    });
+  enable() {
+    this.config.enabled = true;
   }
-};
-var CfgTotpBackupCodes = class {
-  static {
-    __name(this, "CfgTotpBackupCodes");
+  disable() {
+    this.config.enabled = false;
   }
-  /**
-   * Get backup codes status for user.
-   */
-  static cfgTotpBackupCodesRetrieve(options) {
-    return (options?.client ?? client).get({
-      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
-      url: "/cfg/totp/backup-codes/",
-      ...options
-    });
+  setConfig(config) {
+    this.config = { ...this.config, ...config };
   }
-  /**
-   * Regenerate backup codes.
-   *
-   * Requires TOTP code for verification.
-   * Invalidates all existing codes.
-   */
-  static cfgTotpBackupCodesRegenerateCreate(options) {
-    return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
-      url: "/cfg/totp/backup-codes/regenerate/",
-      ...options,
-      headers: {
-        "Content-Type": "application/json",
-        ...options.headers
-      }
+  filterHeaders(headers) {
+    if (!headers) return {};
+    const filtered = {};
+    Object.keys(headers).forEach((key) => {
+      filtered[key] = SENSITIVE_HEADERS.includes(key.toLowerCase()) ? "***" : headers[key] || "";
     });
+    return filtered;
   }
-};
-var CfgTotp = class {
-  static {
-    __name(this, "CfgTotp");
-  }
-  /**
-   * List all TOTP devices for user.
-   */
-  static cfgTotpDevicesRetrieve(options) {
-    return (options?.client ?? client).get({
-      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
-      url: "/cfg/totp/devices/",
-      ...options
-    });
+  logRequest(request) {
+    if (!this.config.enabled || !this.config.logRequests) return;
+    const { method, url, headers, body } = request;
+    this.consola.start(`${method} ${url}`);
+    if (this.config.logHeaders && headers) this.consola.debug("Headers:", this.filterHeaders(headers));
+    if (this.config.logBodies && body) this.consola.debug("Body:", body);
   }
-  /**
-   * Delete a TOTP device.
-   *
-   * Requires verification code if removing the last/primary device.
-   */
-  static cfgTotpDevicesDestroy(options) {
-    return (options.client ?? client).delete({
-      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
-      url: "/cfg/totp/devices/{id}/",
-      ...options
-    });
+  logResponse(request, response) {
+    if (!this.config.enabled || !this.config.logResponses) return;
+    const { method, url } = request;
+    const { status, statusText, data, duration } = response;
+    this.consola.success(`${method} ${url} ${status} ${statusText} (${duration}ms)`);
+    if (this.config.logBodies && data) this.consola.debug("Response:", data);
   }
-  /**
-   * Completely disable 2FA for account.
-   *
-   * Requires verification code.
-   */
-  static cfgTotpDisableCreate(options) {
-    return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
-      url: "/cfg/totp/disable/",
-      ...options,
-      headers: {
-        "Content-Type": "application/json",
-        ...options.headers
-      }
-    });
+  logError(request, error) {
+    if (!this.config.enabled || !this.config.logErrors) return;
+    const { method, url } = request;
+    const { message, statusCode, fieldErrors, duration } = error;
+    this.consola.error(`${method} ${url} ${statusCode || "Network"} Error (${duration}ms)`);
+    this.consola.error("Message:", message);
+    if (fieldErrors && Object.keys(fieldErrors).length > 0) {
+      this.consola.error("Field Errors:");
+      Object.entries(fieldErrors).forEach(([field, errors]) => {
+        errors.forEach((err) => this.consola.error(`  \u2022 ${field}: ${err}`));
+      });
+    }
   }
-};
-var CfgTotpSetup = class {
-  static {
-    __name(this, "CfgTotpSetup");
+  info(message, ...args) {
+    if (this.config.enabled) this.consola.info(message, ...args);
   }
-  /**
-   * Start 2FA setup process.
-   *
-   * Creates a new TOTP device and returns QR code for scanning.
-   */
-  static cfgTotpSetupCreate(options) {
-    return (options?.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
-      url: "/cfg/totp/setup/",
-      ...options,
-      headers: {
-        "Content-Type": "application/json",
-        ...options?.headers
-      }
-    });
+  warn(message, ...args) {
+    if (this.config.enabled) this.consola.warn(message, ...args);
   }
-  /**
-   * Confirm 2FA setup with first valid code.
-   *
-   * Activates the device and generates backup codes.
-   */
-  static cfgTotpSetupConfirmCreate(options) {
-    return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
-      url: "/cfg/totp/setup/confirm/",
-      ...options,
-      headers: {
-        "Content-Type": "application/json",
-        ...options.headers
-      }
-    });
+  error(message, ...args) {
+    if (this.config.enabled) this.consola.error(message, ...args);
   }
-};
-var CfgTotpVerify = class {
-  static {
-    __name(this, "CfgTotpVerify");
+  debug(message, ...args) {
+    if (this.config.enabled) this.consola.debug(message, ...args);
   }
-  /**
-   * Verify TOTP code for 2FA session.
-   *
-   * Completes authentication and returns JWT tokens on success.
-   */
-  static cfgTotpVerifyCreate(options) {
-    return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
-      url: "/cfg/totp/verify/",
-      ...options,
-      headers: {
-        "Content-Type": "application/json",
-        ...options.headers
-      }
-    });
+  success(message, ...args) {
+    if (this.config.enabled) this.consola.success(message, ...args);
   }
-  /**
-   * Verify backup recovery code for 2FA session.
-   *
-   * Alternative verification method when TOTP device unavailable.
-   */
-  static cfgTotpVerifyBackupCreate(options) {
-    return (options.client ?? client).post({
-      security: [{ name: "X-API-Key", type: "apiKey" }, { scheme: "bearer", type: "http" }],
-      url: "/cfg/totp/verify/backup/",
-      ...options,
-      headers: {
-        "Content-Type": "application/json",
-        ...options.headers
-      }
-    });
+  withTag(tag) {
+    return this.consola.withTag(tag);
   }
 };
+var defaultLogger = new APILogger();
 
 // src/_api/generated/_cfg_accounts/api.ts
+init_sdk_gen();
+init_sdk_gen();
+init_sdk_gen();
+init_sdk_gen();
+init_sdk_gen();
 var API = class {
   static {
     __name(this, "API");
@@ -2084,6 +2436,9 @@ var API = class {
   }
 };
 
+// src/_api/generated/helpers/index.ts
+init_auth();
+
 // src/_api/generated/helpers/storage.ts
 var LocalStorageAdapter = class {
   static {
@@ -2174,6 +2529,9 @@ var CookieStorageAdapter = class {
   }
 };
 
+// src/_api/generated/helpers/index.ts
+init_errors();
+
 // src/_api/generated/helpers/validation-events.ts
 function dispatchValidationError(detail) {
   if (typeof window === "undefined") return;
@@ -2212,6 +2570,8 @@ function formatZodError(error) {
 __name(formatZodError, "formatZodError");
 
 // src/_api/generated/_cfg_centrifugo/api.ts
+init_auth();
+init_sdk_gen();
 var API2 = class {
   static {
     __name(this, "API");
@@ -2284,6 +2644,11 @@ var API2 = class {
 };
 
 // src/_api/generated/_cfg_totp/api.ts
+init_auth();
+init_sdk_gen();
+init_sdk_gen();
+init_sdk_gen();
+init_sdk_gen();
 var API3 = class {
   static {
     __name(this, "API");
@@ -2363,6 +2728,9 @@ var CfgAccountsApi = new API();
 var CfgCentrifugoApi = new API2();
 var CfgTotpApi = new API3();
 
+// src/index.ts
+init_sdk_gen();
+
 // src/auth/utils/env.ts
 var isDev = process.env.NODE_ENV === "development";
 var isProd = !isDev;